ait-dsn (2.0.0), ait-gui (>=2.4.0, <=2.4.1) potentially affected by CVE-2024-35058 via ait-core (>=2.3.5, <=2.5.2)

ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2024-35058 Source advisory: GHSA-4GXJ-5MMR-7PXQ...

ait-dsn (2.0.0), ait-gui (>=2.4.0, <=2.4.1) potentially affected by CVE-2024-35056 via ait-core (>=2.3.5, <=2.5.2)

ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2024-35056 Source advisory: GHSA-GPGJ-XRGW-8MX2...

CVE-2024-35056

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

CVE-2024-35057

An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...

CVE-2024-35058

An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...

CVE-2024-35060

An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...

PT-2024-26302

Name of the Vulnerable Software and Affected Versions NASA AIT-Core version 2.5.2 Description An issue in the API wait function allows attackers to execute arbitrary code via supplying a crafted string. Recommendations For NASA AIT-Core version 2.5.2, at the moment, there is no information about ...

CVE-2024-35061: Missing Encryption of Sensitive Data

NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution...

CVE-2024-35061

NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution...

CVE-2024-35061

NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution...

CVE-2024-35061

NASA AIT-Core v2.5.2 is vulnerable to a man-in-the-middle attack because it uses unencrypted channels to exchange data over the network. This flaw, categorized as CWE-311 , allows an attacker to intercept sensitive information. Notably, when chained with CVE-2024-35059 , this vulnerability can le...

CVE-2024-35061

NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution...

PT-2024-26305

Name of the Vulnerable Software and Affected Versions NASA AIT-Core version 2.5.2 Description The issue allows attackers to execute a man-in-the-middle attack due to the use of unencrypted channels for data exchange over the network. This can lead to unauthenticated, fully remote code execution...

CVE-2024-35061

NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution...

CVE-2024-35057

An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...

CVE-2024-35059

An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...

CVE-2024-35056

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

CVE-2024-35056

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

CVE-2024-35060: Cleartext Transmission of Sensitive Information

An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...

CVE-2024-35060

The NASA AIT-Core software suite, specifically version v2.5.2 , contains a vulnerability in its YAML Python library . An attacker can exploit this issue by supplying a crafted YAML file to achieve arbitrary command execution . As of the current documentation, there is no information regarding a n...