CVE-2024-35057

An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...

CVE-2024-35059

NASA AIT-Core v2.5.2 is vulnerable to Remote Code Execution (RCE) due to the unsafe loading of untrusted Pickle files within its Python library. This flaw allows attackers to execute arbitrary commands on the affected system. Notably, when combined with CVE-2024-35061 (which involves unencrypted ...

CVE-2024-35059

An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...

CVE-2024-35058

An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...

CVE-2024-35061

NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution...

CVE-2024-35058

An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...

CVE-2024-35058: Cleartext Transmission of Sensitive Information

An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...

CVE-2024-35057: Cleartext Transmission of Sensitive Information

An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...

CVE-2024-35057

An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...

sbuv.gsfc.nasa.gov Improper Access Control vulnerability OBB-3907531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nasa.or.id Cross Site Scripting vulnerability OBB-3898162

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-4G88-4HGM-M99X NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

NASA Open MCT Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...

GHSA-V8FC-QXVJ-F3MG NASA Open MCT Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...

CVE-2023-45884

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

CVE-2023-45884

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

CVE-2023-45885

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

Cross site scripting

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...