CVE-2026-46562

creationtimestamp| type| source ---|---|--- 2026-05-21 15:02:43+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-vmwp-vh32-rj75 2026-07-16 16:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroqjqdci2o 2026-07-16 18:59:17+00:00|...

CVE-2026-46621

creationtimestamp| type| source ---|---|--- 2026-05-21 15:02:27+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-2g95-6x5q-xjwj 2026-07-16 16:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroqkzgbc2j 2026-07-16 19:19:19+00:00|...

CVE-2023-45278

Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request...

CVE-2023-45280

Yamcs 5.8.6 allows XSS issue 2 of 2. It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload an HTML file containing arbitrary JavaScript and then navigate to it. Once the user opens the file, the browser will execute the arbitrar...

CVE-2023-45279

Yamcs 5.8.6 allows XSS issue 1 of 2. It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload a display referencing a malicious JavaScript file to the bucket. The user can then open the uploaded display by selecting Telemetry from...

EUVD-2023-50686

Malicious code in bioql PyPI...

EUVD-2023-2643

Malicious code in bioql PyPI...

EUVD-2023-51438

Malicious code in bioql PyPI...

EUVD-2023-2638

Malicious code in bioql PyPI...

EUVD-2023-49583

Malicious code in bioql PyPI...

EUVD-2023-2824

Malicious code in bioql PyPI...

EUVD-2023-2664

Malicious code in bioql PyPI...

CVE-2023-47311

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking...

CVE-2023-46471

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...

CVE-2023-45281

An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file...

CVE-2023-45277

Yamcs 5.8.6 is vulnerable to directory traversal issue 1 of 2. The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files...

CVE-2023-46470

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser...

CVE-2023-47311

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking...

CVE-2023-47311

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking...

CVE-2023-46471

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...