nasa Vulnerability Advisory Catalog

Total 60 security vulnerabilities recorded for nasa software and firmware.

← Back to All Vendors
Component: openmct

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the โ€œSummary Widgetโ€ element, that allows the injection of malicious JavaScript ...

๐Ÿ“… 2022-02-20
CVSS 6.1 Dossier →
Component: openmct

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the โ€œCondition Widgetโ€ element, that allows the injection of malicious JavaScrip...

๐Ÿ“… 2022-02-20
CVSS 6.1 Dossier →
Component: openmct

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the โ€œWeb Pageโ€ element, that allows the injection of malicious JavaScript into t...

๐Ÿ“… 2022-02-20
CVSS 6.1 Dossier →
CVE-2019-1010060 CRITICAL
Component: cfitsio

NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were ...

๐Ÿ“… 2019-07-16
CVSS 9.8 Dossier →
Component: cfitsio

Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted image...

๐Ÿ“… 2018-08-01
CVSS 8.8 Dossier →
Component: cfitsio

In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbit...

๐Ÿ“… 2018-04-16
CVSS 8.8 Dossier →
Component: cfitsio

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbit...

๐Ÿ“… 2018-04-16
CVSS 8.8 Dossier →
Component: cfitsio

In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overw...

๐Ÿ“… 2018-04-16
CVSS 8.8 Dossier →
Component: rtretrievalframework

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in re...

๐Ÿ“… 2018-02-09
CVSS 8.8 Dossier →
Component: kodiak

NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result in remote code execution. This ...

๐Ÿ“… 2018-02-09
CVSS 8.8 Dossier →
Component: pyblock

NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack ...

๐Ÿ“… 2018-02-09
CVSS 7.8 Dossier →
Component: singledop

NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library (Weather data) that can result in remote code execution. This a...

๐Ÿ“… 2018-02-09
CVSS 7.8 Dossier →
Page 3 of 3 (60 Total Records)