Vendors / nasa Records 87 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 14
CVSS high 44
Exploited now nasa records in CISA KEV No nasa vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query_packets and insert functions.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00608 · Published 2024-05-21 · No fix listed CWE-89
Priority LOW 35
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file.
CVSS 3.1 HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00468 · Published 2024-05-21 · No fix listed CWE-319
Priority LOW 35
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands.
CVSS 3.1 HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00453 · Published 2024-05-21 · No fix listed CWE-319
Priority LOW 35
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string.
CVSS 3.1 HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00443 · Published 2024-05-21 · No fix listed CWE-319
Priority LOW 35
An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet.
CVSS 3.1 HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00438 · Published 2024-05-21 · No fix listed CWE-319
Priority LOW 33
NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00551 · Published 2024-05-21 · No fix listed CWE-311
Open these records in search → All records by CVSS severity
14 44 27 2 0
THREATIST.IORead the docs