EUVD-2023-50686

Malicious code in bioql PyPI...

CVE-2023-46470

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser...

CVE-2023-46471

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...

Cross site scripting

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser...

Cross site scripting

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...

CVE-2023-46470

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser...

Yamcs Security Vulnerabilities

Yamcs is an open source software framework from Yamcs Open Source. It is used to command and control spacecraft, satellites, payloads, ground stations and ground equipment. A security vulnerability exists in Space Applications Services Yamcs version v.5.8.6, which originates from a stored...

CVE-2023-46470

The CVE-2023-46470 entry concerns Space Applications Services Yamcs v5.8.6, where a Cross Site Scripting (stored XSS) vulnerability in the ArchiveBrowser’s Timeline view could allow a remote attacker to execute arbitrary code via a crafted telecommand. Affected component: Yamcs 5.8.6; root cause:...

CVE-2023-46470: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser...

CVE-2023-46471: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...

PT-2023-30040 · Space Applications Services · Yamcs

Name of the Vulnerable Software and Affected Versions: Space Applications Services Yamcs version 5.8.6 Description: The issue allows a remote attacker to execute arbitrary code via the scriptContainer variable of the ScriptViewer, potentially leading to unauthorized access or control. This is a...

CVE-2023-46471

This CVE (CVE-2023-46471) concerns Space Applications Services Yamcs v5.8.6. The vulnerability is a stored cross-site scripting flaw in the ScriptViewer, exploitable via the scriptContainer variable, allowing a remote attacker to execute arbitrary code. Affected component: ScriptViewer in Yamcs 5...

CVE-2023-46471

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...