38 matches found
EUVD-2026-52509
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-67977
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-67976
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...
CVE-2026-67977
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-67976
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...
CVE-2026-67976
The CVE concerns the Ref::SignalGen component of the fprime framework (version 4.2.2). It states that user-controlled parameters are not validated for safety, enabling a Denial of Service when unsafe parameters are input. The available connected documents corroborate this description and do not p...
EUVD-2026-52479
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...
CVE-2026-67977
The CVE-2026-67977 entry concerns the fprime framework (v4.2.2) where an integer overflow in the Svc::FileDownlink::SendPartial component can lead to a Denial of Service. Affected software is fprime framework, version 4.2.2, with the vulnerable function Svc::FileDownlink::SendPartial. The provide...
fprime 输入验证错误漏洞
fprime is an open-source flight software and embedded system framework developed by NASA. Versions of fprime prior to 4.2.0 contained a vulnerability related to input validation errors. This vulnerability stemmed from boundary-checking use of U32 addition, which allowed overflow bypasses, and the...
EUVD-2025-8097
Malicious code in bioql PyPI...
EUVD-2025-8099
Malicious code in bioql PyPI...
EUVD-2025-8096
Malicious code in bioql PyPI...
CVE-2024-55029
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
CVE-2024-55030
A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...
CVE-2024-55028
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
PYSEC-2025-115
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
CVE-2024-55029
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
CVE-2024-55028
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
