Skip to content
Noroxi

nasa records

64 published records for vendor nasa.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
17
With a fix record
39.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

64 records
  • CVE-2019-1010060
    41Plan

    NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow.

    CriticalCVSS 9.8No exploitEPSS 7%

    nasa · cfitsioJul 16, 2019

  • CVE-2024-55030
    40Plan

    A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands.

    CriticalCVSS 9.8No exploitEPSS 1%

    nasa · fprimeMar 25, 2025

  • CVE-2024-55028
    39Monitor

    A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted

    CriticalCVSS 9.8No exploitEPSS 0%

    nasa · fprimeMar 25, 2025

  • CVE-2025-46674
    39Monitor

    NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading t

    CriticalCVSS 9.9No exploitEPSS 0%

    nasa · cryptolibApr 26, 2025

  • CVE-2024-35056
    39Monitor

    NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query_packets and insert functions.

    CriticalCVSS 9.8No exploitEPSS 0%

    nasa · ait coreMay 21, 2024

  • CVE-2025-25373
    39Monitor

    The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the

    CriticalCVSS 9.8No exploitEPSS 0%

    nasa · core flight systemMar 25, 2025

  • CVE-2025-46673
    39Monitor

    NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space D

    CriticalCVSS 9.9Proof of conceptEPSS 0%

    nasa · cryptolibApr 26, 2025

  • CVE-2026-41144
    39Monitor

    F´ (F Prime) has Integer Overflow in FileUplink

    CriticalCVSS 9.8No exploitEPSS 0%

    nasa · fprimeApr 22, 2026

  • CVE-2025-30216
    37Monitor

    CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length

    CriticalCVSS 9.1Proof of conceptEPSS 2%

    nasa · cryptolibMar 25, 2025

  • CVE-2026-60113
    37Monitor

    AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

    CriticalCVSS 9.3No exploitEPSS 0%

    nasa · ait dsnJul 29, 2026

  • CVE-2026-60112
    37Monitor

    AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

    CriticalCVSS 9.3No exploitEPSS 0%

    nasa · ait guiJul 29, 2026

  • CVE-2025-30356
    37Monitor

    Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`

    CriticalCVSS 9.3No exploitEPSS 0%

    nasa · cryptolibApr 1, 2025

  • CVE-2018-3849
    36Monitor

    In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwri

    HighCVSS 8.8No exploitEPSS 3%

    nasa · cfitsioApr 16, 2018

  • CVE-2018-3848
    36Monitor

    In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwri

    HighCVSS 8.8No exploitEPSS 3%

    nasa · cfitsioApr 16, 2018

  • CVE-2018-3846
    36Monitor

    In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer over

    HighCVSS 8.8No exploitEPSS 3%

    nasa · cfitsioApr 16, 2018

  • CVE-2018-3847
    36Monitor

    Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42.

    HighCVSS 8.8No exploitEPSS 2%

    nasa · cfitsioAug 1, 2018

  • CVE-2018-1000047
    36Monitor

    NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result in remote code execut

    HighCVSS 8.8No exploitEPSS 2%

    nasa · kodiakFeb 9, 2018

  • CVE-2018-1000048
    36Monitor

    NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can re

    HighCVSS 8.8No exploitEPSS 2%

    nasa · rtretrievalframeworkFeb 9, 2018

  • CVE-2025-29912
    35Monitor

    CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity

    HighCVSS 8.9No exploitEPSS 1%

    nasa · cryptolibMar 17, 2025

  • CVE-2025-29909
    35Monitor

    CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability

    HighCVSS 8.9No exploitEPSS 1%

    nasa · cryptolibMar 17, 2025

  • CVE-2025-29911
    35Monitor

    CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function

    HighCVSS 8.9No exploitEPSS 0%

    nasa · cryptolibMar 17, 2025

  • CVE-2025-29913
    35Monitor

    CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow

    HighCVSS 8.9No exploitEPSS 0%

    nasa · cryptolibMar 17, 2025

  • CVE-2025-46672
    35Monitor

    NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.

    HighCVSS 8.8No exploitEPSS 0%

    nasa · cryptolibApr 26, 2025

  • CVE-2025-64096
    35Monitor

    CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check

    HighCVSS 8.8No exploitEPSS 0%

    nasa · cryptolibOct 30, 2025

  • CVE-2025-54878
    34Monitor

    Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`

    HighCVSS 8.6No exploitEPSS 0%

    nasa · cryptolibAug 11, 2025