Lucene search
+L

302 matches found

OSV
OSV
•added 2023/11/20 9:15 p.m.•17 views

CVE-2023-46470

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser...

5.4CVSS6.1AI score0.00603EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/11/20 9:15 p.m.•8 views

CVE-2023-46470

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser...

5.4CVSS6.2AI score0.00603EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/11/20 9:15 p.m.•14 views

CVE-2023-47311

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking...

6.1CVSS6.4AI score0.00419EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/20 9:15 p.m.•19 views

CVE-2023-46471

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...

5.4CVSS6.1AI score0.00603EPSS
SaveExploits1References1
NVD
NVD
•added 2023/11/20 9:15 p.m.•17 views

CVE-2023-46470

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser...

5.4CVSS0.00603EPSS
SaveExploits1References1
NVD
NVD
•added 2023/11/20 9:15 p.m.•29 views

CVE-2023-47311

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking...

6.1CVSS0.00419EPSS
SaveExploits1References1
NVD
NVD
•added 2023/11/20 9:15 p.m.•16 views

CVE-2023-46471

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...

5.4CVSS0.00603EPSS
SaveExploits1References1
Prion
Prion
•added 2023/11/20 9:15 p.m.•23 views

Cross site scripting

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...

4.9CVSS7.6AI score0.00603EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/11/20 9:15 p.m.•22 views

Stack overflow

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking...

5.8CVSS7.2AI score0.00419EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/11/20 12:00 a.m.•20 views

Yamcs Security Vulnerabilities

Yamcs is an open source software framework from Yamcs Open Source. It is used to command and control spacecraft, satellites, payloads, ground stations and ground equipment. A security vulnerability exists in Space Applications Services Yamcs version 5.8.6, which originated from a vulnerability th...

6.1CVSS7.4AI score0.00419EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/20 12:00 a.m.•16 views

Yamcs Security Vulnerabilities

Yamcs is an open source software framework from Yamcs Open Source. It is used to command and control spacecraft, satellites, payloads, ground stations and ground equipment. A security vulnerability exists in Space Applications Services Yamcs version v.5.8.6, which originates from a stored...

5.4CVSS6.1AI score0.00603EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/20 12:00 a.m.•17 views

Yamcs Security Vulnerabilities

Yamcs is an open source software framework from Yamcs Open Source. It is used to command and control spacecraft, satellites, payloads, ground stations and ground equipment. A security vulnerability exists in Space Applications Services Yamcs version v.5.8.6, which originates from a stored...

5.4CVSS6.1AI score0.00603EPSS
SaveExploits1References2
CVE
CVE
•added 2023/11/20 12:00 a.m.•64 views

CVE-2023-46471

This CVE (CVE-2023-46471) concerns Space Applications Services Yamcs v5.8.6. The vulnerability is a stored cross-site scripting flaw in the ScriptViewer, exploitable via the scriptContainer variable, allowing a remote attacker to execute arbitrary code. Affected component: ScriptViewer in Yamcs 5...

5.4CVSS5.8AI score0.00603EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/11/20 12:00 a.m.•44 views

CVE-2023-46470

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser...

6AI score0.00603EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/20 12:00 a.m.•4 views

CVE-2023-47311: Improper Restriction of Rendered UI Layers or Frames

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking...

6.1CVSS6.4AI score0.00419EPSS
SaveExploits1References2
CVE
CVE
•added 2023/11/20 12:00 a.m.•54 views

CVE-2023-46470

The CVE-2023-46470 entry concerns Space Applications Services Yamcs v5.8.6, where a Cross Site Scripting (stored XSS) vulnerability in the ArchiveBrowser’s Timeline view could allow a remote attacker to execute arbitrary code via a crafted telecommand. Affected component: Yamcs 5.8.6; root cause:...

5.4CVSS5.8AI score0.00603EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/11/20 12:00 a.m.•57 views

CVE-2023-47311

CVE-2023-47311 affects Yamcs 5.8.6. The issue allows attackers to send arbitrary telecommands in a Command Stack via Clickjacking. Affected component is Yamcs’ Command Stack handling; root cause is described as a clickjacking path that enables issuance of unauthorized commands. Documented impact ...

6.1CVSS6.3AI score0.00419EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/11/20 12:00 a.m.•19 views

PT-2023-30408 · Yamcs · Yamcs

Name of the Vulnerable Software and Affected Versions: Yamcs version 5.8.6 Description: An issue in Yamcs allows attackers to send arbitrary telecommands in a Command Stack via Clickjacking. Recommendations: For Yamcs version 5.8.6, at the moment, there is no information about a newer version tha...

6.1CVSS6.3AI score0.00419EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/20 12:00 a.m.•5 views

CVE-2023-46471: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...

5.4CVSS6.6AI score0.00603EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/11/20 12:00 a.m.•8 views

CVE-2023-46471

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer...

5.8AI score0.00603EPSS
SaveExploits1References1
Rows per page
Query Builder