Lucene search
+L

6 matches found

NVD
NVD
•added 2018/02/09 11:29 p.m.•30 views

CVE-2018-1000048

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

8.8CVSS8.9AI score0.02018EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/09 11:29 p.m.•34 views

Design/Logic Flaw

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

6.8CVSS8.8AI score0.02018EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2018/02/09 11:00 p.m.•61 views

CVE-2018-1000048

Affecte​d software: NASA RtRetrievalFramework v1.0. Vulnerability: CWE-502 in the Data retrieval function of RtRetrievalFramework, leading to remote code execution. Impact: remote code execution with attacker-controlled weather data processing as a trigger. The connected documents confirm this CV...

8.8CVSS8.8AI score0.02018EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/02/09 11:00 p.m.•42 views

CVE-2018-1000048

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

8.9AI score0.02018EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/09 12:00 a.m.•9 views

CVE-2018-1000048: Deserialization of Untrusted Data

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

8.8CVSS8.2AI score0.02018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/02/09 12:00 a.m.•9 views

PT-2018-9235

Name of the Vulnerable Software and Affected Versions: NASA RtRetrievalFramework version v1.0 Description: The issue concerns a remote code execution flaw in the Data retrieval functionality of the RtRetrieval framework. This can be exploited when a victim attempts to retrieve and process a weath...

8.8CVSS0.02018EPSS
SaveExploits0References3
Rows per page
Query Builder