CVEs we hold for Nasa
Records whose assigning authority named Nasa as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-82802NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgeryNASA earthdata-search
CVE-2026-82801NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgeryNASA earthdata-search
CVE-2026-82480NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflowNASA cFS
CVE-2026-82478NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflowNASA Trick
CVE-2026-79954NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCIDNASA CryptoLib
CVE-2026-75584ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertionnasa-jpl ION-DTN
CVE-2026-72579NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data ServerNASA HyperCP
CVE-2026-72577NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command InjectionNASA fprime-gds
CVE-2026-71289NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST APINASA-AMMOS anms
CVE-2026-71214NASA-AMMOS plandev - Client-Supplied session_variables Bypass Hasura-Origin Authorization in sequencing-serverNASA-AMMOS plandev (sequencing-server)
CVE-2026-5476NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflowNASA cFS
CVE-2026-5474NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflowNASA cFS
CVE-2026-47731NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by…NASA-AMMOS AIT-Core
CVE-2026-22697CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON…nasa CryptoLib
CVE-2026-22027CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversionnasa CryptoLib
CVE-2026-22026CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustionnasa CryptoLib
CVE-2026-22024CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustionnasa CryptoLib
CVE-2026-22023CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Patternnasa CryptoLib
CVE-2026-21900CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Patternnasa CryptoLib
CVE-2026-21899CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url stringnasa CryptoLib
CVE-2026-21897CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parametersnasa CryptoLib
CVE-2026-18064NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer DereferenceNASA Core Flight System (cFS) Health & Safety (HS)…
CVE-2026-15352NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer DereferenceNASA Core Flight System (cFS) Health & Safety (HS)…
CVE-2025-64096CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length checknasa CryptoLib
CVE-2025-61910NASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-Servicenasa-jpl ION-DTN
CVE-2025-59534CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()nasa CryptoLib
CVE-2025-49873WordPress Elessi theme <= 6.3.9 - Cross Site Scripting (XSS) VulnerabilityNasaTheme Elessi
CVE-2025-49067WordPress Nasa Core plugin < 6.4.1 - Cross Site Scripting (XSS) vulnerabilityNasaTheme Nasa Core
CVE-2025-39508WordPress Nasa Core Plugin <= 6.4.4 - Cross Site Scripting (XSS) vulnerabilityNasaTheme Nasa Core
CVE-2025-39507WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerabilityNasaTheme Nasa Core
CVE-2025-39506WordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerabilityNasaTheme Nasa Core
CVE-2025-30356Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`nasa CryptoLib
CVE-2025-30216CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Lengthnasa CryptoLib
CVE-2025-29913CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflownasa CryptoLib
CVE-2025-29912CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecuritynasa CryptoLib
CVE-2025-29911CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Functionnasa CryptoLib
CVE-2025-29910CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leaknasa CryptoLib
CVE-2025-29909CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerabilitynasa CryptoLib
CVE-2024-54130Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)nasa-jpl ION-DTN
CVE-2024-54129Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7nasa-jpl ION-DTN
62 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.