Lucene search
+L

5 matches found

NVD
NVD
•added 2018/02/09 11:29 p.m.•29 views

CVE-2018-1000048

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

8.8CVSS8.9AI score0.02018EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/09 11:29 p.m.•32 views

Design/Logic Flaw

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

6.8CVSS8.8AI score0.02018EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/02/09 11:00 p.m.•38 views

CVE-2018-1000048

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

8.9AI score0.02018EPSS
SaveExploits0References1
CVE
CVE
•added 2018/02/09 11:00 p.m.•57 views

CVE-2018-1000048

Affecte​d software: NASA RtRetrievalFramework v1.0. Vulnerability: CWE-502 in the Data retrieval function of RtRetrievalFramework, leading to remote code execution. Impact: remote code execution with attacker-controlled weather data processing as a trigger. The connected documents confirm this CV...

8.8CVSS8.8AI score0.02018EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/09 12:00 a.m.•5 views

CVE-2018-1000048: Deserialization of Untrusted Data

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

8.8CVSS8.2AI score0.02018EPSS
SaveExploits0References2
Rows per page
Query Builder