723 matches found
CVE-2025-25373
The Memory Management Module of NASA cFS Core Flight System Aquila has insecure permissions, which can be exploited to gain an RCE on the platform...
CVE-2025-25374
The NASA cFS (Core Flight System) Aquila is vulnerable to an uncontrolled resource consumption issue (CWE-400) that can put the onboard software into a state preventing the launch of any external application. This results in a platform denial of service . While the specific affected versions are ...
CVE-2025-25371
NASA cFS Core Flight System Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system...
CVE-2024-55028: Improper Control of Generation of Code
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
CVE-2025-25372
NASA cFS Core Flight System Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module...
CVE-2025-25373
The NASA cFS (Core Flight System) Aquila software is affected by a vulnerability in its Memory Management Module due to insecure permissions (CWE-732). This flaw can be exploited to achieve remote code execution (RCE) on the platform. While a proof-of-concept has been published, no specific patch...
CVE-2025-25371: Improper Limitation of a Pathname to a Restricted Directory
NASA cFS Core Flight System Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system...
PT-2025-12829
Name of the Vulnerable Software and Affected Versions NASA cFS Core Flight System Aquila affected versions not specified Description The Memory Management Module of NASA cFS Core Flight System Aquila has insecure permissions, which can be exploited to gain remote code execution RCE on the platfor...
CVE-2025-25374
In NASA cFS Core Flight System Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service...
CVE-2024-55029
The NASA Fprime v3.4.3 framework and the fprime-gds (PyPI) package are vulnerable to Cross-site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, specifically within the Run Commands table of fprime-gds version 4.3.0. An attacker can execute scri...
CVE-2024-55029
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
CVE-2025-25374
In NASA cFS Core Flight System Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service...
CVE-2024-55028
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
CVE-2024-55030
NASA Fprime v3.4.3 contains a command injection vulnerability (CWE-77) within the Command Dispatcher Service . This flaw allows an attacker to execute arbitrary commands on the system. The vulnerability is associated with the fprime-gds (PyPI) package, specifically version 4.3.0 , which may also ...
CVE-2025-25373: Incorrect Permission Assignment for Critical Resource
The Memory Management Module of NASA cFS Core Flight System Aquila has insecure permissions, which can be exploited to gain an RCE on the platform...
CVE-2025-25372
NASA cFS Core Flight System Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module...
CVE-2025-25374
In NASA cFS Core Flight System Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service...
CVE-2024-55029: Improper Neutralization of Input During Web Page Generation
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
CVE-2024-55030: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...