目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

NASA 厂商漏洞列表 / CVE 中文分析 57

NASA 厂商相关 57 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

NASA（美国国家航空航天局）主导航天探索与科学研究，其开源软件广泛用于太空任务数据处理。截至最新统计已收录 34 条 CVE，历史漏洞多集中于输入验证不足导致的远程代码执行及跨站脚本攻击，部分涉及权限绕过。值得关注的是其关键基础设施组件常面临供应链风险，且因涉及国家安全，漏洞披露流程严格，近期修复重点在于强化加密通信与访问控制机制，以应对日益复杂的网络威胁环境。

Top products by NASA: CryptoLib fprime cFS openmct CFITSIO Core Flight System (cFS) Health & Safety (HS) Application earthdata-search openVSP fprime-gds HyperCP Trick
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-92160 F´: SendPartial Integer Overflow Leading to Assertion DoS — fprime CWE-190 6.5 Medium 2026-10-14
CVE-2026-92155 F´: FileUplink Unknown Packet Type Assertion DoS — fprime CWE-617 7.5 High 2026-10-14
CVE-2026-92150 F´: GenericHub Malformed Buffer Assertion DoS — fprime CWE-617 7.5 High 2026-10-14
CVE-2026-92154 F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation — fprime CWE-190 8.1 High 2026-10-14
CVE-2026-92158 F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write — fprime CWE-190 7.2 High 2026-10-14
CVE-2026-92159 F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry — fprime CWE-130 6.5 Medium 2026-10-14
CVE-2026-92156 F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge — fprime CWE-131 6.5 Medium 2026-10-14
CVE-2026-92157 F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion — fprime CWE-190 6.5 Medium 2026-10-14
CVE-2026-92152 F´: Unvalidated Port Index in GenericHub — fprime CWE-129 9.3 Critical 2026-10-14
CVE-2026-92153 F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath — fprime CWE-22 7.1 High 2026-10-14
CVE-2026-92151 F´: SpacePacketDeframer Small Packet Assertion DoS — fprime CWE-617 7.5 High 2026-10-14
CVE-2026-105164 NASA cFS CFE_FS_ParseInputFileNameEx 缓冲区越界漏洞 — cFS CWE-125 2.7 Low 2026-10-04
CVE-2026-79954 NASA CryptoLib 1.5.0 安全协会接收路径错误 — CryptoLib CWE-306 8.7 High 2026-09-18
CVE-2026-82802 NASA Earthdata Search 服务端请求伪造漏洞 — earthdata-search CWE-918 5.3 Medium 2026-08-31
CVE-2026-82801 NASA Earthdata Search 服务端请求伪造漏洞 — earthdata-search CWE-918 7.3 High 2026-08-31
CVE-2026-82480 NASA cFS 数字错误漏洞 — cFS CWE-191 7.4 High 2026-08-30
CVE-2026-82479 NASA cFS 缓冲区错误漏洞 — cFS CWE-120 6.3 Medium 2026-08-30
CVE-2026-82478 NASA Trick 缓冲区错误漏洞 — Trick CWE-121 7.3 High 2026-08-30
CVE-2026-72579 NASA HyperCP 命令注入漏洞 — HyperCP CWE-78 7.5 High 2026-08-10
CVE-2026-72577 NASA F´ GDS 授权问题漏洞 — fprime-gds CWE-306 9.8 Critical 2026-08-10
CVE-2026-18064 NASA core Flight System Health and Safety Application 异常处理不当漏洞 — Core Flight System (cFS) Health & Safety (HS) Application CWE-476 7.5 High 2026-07-30
CVE-2026-15352 NASA core Flight System (cFS) Health and Safety Application 异常处理不当漏洞 — Core Flight System (cFS) Health & Safety (HS) Application CWE-476 7.5 High 2026-07-16
CVE-2018-25367 OpenVSP 安全漏洞 — openVSP CWE-120 6.2 Medium 2026-05-25
CVE-2026-41144 fprime 输入验证错误漏洞 — fprime CWE-190 - - 2026-04-21
CVE-2026-5476 Core Flight System 输入验证错误漏洞 — cFS CWE-190 4.6 Medium 2026-04-03
CVE-2026-5475 Core Flight System 缓冲区错误漏洞 — cFS CWE-119 5.5 Medium 2026-04-03
CVE-2026-5474 Core Flight System 安全漏洞 — cFS CWE-122 6.3 Medium 2026-04-03
CVE-2026-5473 Core Flight System（cFS） 代码问题漏洞 — cFS CWE-502 4.5 Medium 2026-04-03
CVE-2026-22697 CryptoLib 安全漏洞 — CryptoLib CWE-122 7.5 High 2026-01-10
CVE-2026-22027 CryptoLib 安全漏洞 — CryptoLib CWE-122 9.8 - 2026-01-10

本页汇总了 NASA 厂商截至目前公开的全部 57 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。