163 matches found
CVE-2024-35059
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...
PT-2024-26303
Name of the Vulnerable Software and Affected Versions NASA AIT-Core version 2.5.2 Description An issue in the Pickle Python library allows attackers to execute arbitrary commands. Recommendations For NASA AIT-Core version 2.5.2, at the moment, there is no information about a newer version that...
CVE-2024-35059: Cleartext Transmission of Sensitive Information
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...
CVE-2024-35056
NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...
CVE-2024-35056
NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...
CVE-2024-35059
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...
CVE-2024-35058: Cleartext Transmission of Sensitive Information
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...
CVE-2024-35056: Improper Neutralization of Special Elements used in an SQL Command
NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...
CVE-2024-35058
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...
CVE-2024-35060
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...
CVE-2024-35058
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...
CVE-2024-35058
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...
CVE-2024-35056
The software NASA AIT-Core v2.5.2 is vulnerable to multiple SQL injection flaws. The root cause is located within the query_packets and insert functions, which fail to properly neutralize special elements used in SQL commands (CWE-89). This vulnerability allows an attacker to perform unauthorized...
CVE-2024-35058
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...
CVE-2024-35059
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...
CVE-2024-35059
NASA AIT-Core v2.5.2 is vulnerable to Remote Code Execution (RCE) due to the unsafe loading of untrusted Pickle files within its Python library. This flaw allows attackers to execute arbitrary commands on the affected system. Notably, when combined with CVE-2024-35061 (which involves unencrypted ...
CVE-2024-35060
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...
PT-2024-26304 · Nasa · Nasa Ait-Core
Name of the Vulnerable Software and Affected Versions: NASA AIT-Core version 2.5.2 Description: An issue in the YAML Python library allows attackers to execute arbitrary commands via supplying a crafted YAML file. Recommendations: For NASA AIT-Core version 2.5.2, at the moment, there is no...