Advisories · Technology
moos-ivp.
Every CVE that names moos-ivp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windows
- moos-ivp
- Path traversal
- CVSS 8.7 High
MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT
- moos-ivp
- Denial of service
- CVSS 8.7 High
MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention
- moos-ivp
- Denial of service
- CVSS 8.7 High
MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service
- moos-ivp
- Denial of service
- CVSS 8.7 High
MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service
- moos-ivp
- Denial of service
- CVSS 8.7 High
MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count
- moos-ivp
- Denial of service
- CVSS 8.7 High
MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned
- moos-ivp
- Memory corruption
- CVSS 8.5 High
MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname
- moos-ivp
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts
- moos-ivp
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders
- moos-ivp
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment
- moos-ivp
- CWE-345
- CVSS 9.3 CriticalCritical · CVSS 9+
MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping
- moos-ivp
- CWE-345
- CVSS 8.7 High
MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing
- moos-ivp
- CWE-345
- CVSS 9.3 CriticalCritical · CVSS 9+
MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names
- moos-ivp
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS
- moos-ivp
- Command injection