Browse CVEs

CRITICAL 9.1 CVE-2026-46621 Yamcs is a mission control framework. Prior to 5.12.7, the Yamcs script evaluation engine for Python algorithms dynamically compiled and evaluated us… Yamcs 5.12.7+ Fix from $2,3002026-07-16 CRITICAL 9.8 CVE-2026-46562 Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-cor… Yamcs 5.12.7+ Fix from $2,3002026-07-16 CRITICAL 9.1 CVE-2026-44632 Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine or… Yamcs 5.12.7+ Fix from $2,3002026-07-16 CRITICAL 9.8 CVE-2026-44596 Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/jav… Yamcs 5.12.7+ Fix from $2,3002026-07-16 MEDIUM 6.1 CVE-2023-47311 An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking. Yacms No fix yet Fix from $1,6002023-11-20 MEDIUM 5.4 CVE-2023-46470 Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted teleco… Yacms No fix yet Fix from $1,6002023-11-20 MEDIUM 5.4 CVE-2023-46471 Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text varia… Yacms No fix yet Fix from $1,6002023-11-20 MEDIUM 5.4 CVE-2023-45279 Yamcs 5.8.6 allows XSS (issue 1 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a w… Yamcs Patch available Fix from $1,6002023-10-19 MEDIUM 5.4 CVE-2023-45280 Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a w… Yamcs Patch available Fix from $1,6002023-10-19 CRITICAL 9.1 CVE-2023-45278 Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP … Yamcs Patch available Fix from $2,3002023-10-19 HIGH 7.5 CVE-2023-45277 Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escap… Yamcs Patch available Fix from $1,9502023-10-19 MEDIUM 6.1 CVE-2023-45281 An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file. Yamcs No fix yet Fix from $1,6002023-10-19