Advisories · Technology
themoos core-moos.
Every CVE that names themoos core-moos among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet
- themoos core-moos
- Memory corruption
- CVSS 5.2 Medium
MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling
- themoos core-moos
- CWE-193
- CVSS 5.3 Medium
MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scripting
- themoos core-moos
- Cross-site scripting (XSS)
- CVSS 7.1 High
MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrase
- themoos core-moos
- Hard-coded credentials
- CVSS 8.7 High
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion
- themoos core-moos
- Denial of service
- CVSS 8.7 High
MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service
- themoos core-moos
- Denial of service
- CVSS 8.7 High
MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation
- themoos core-moos
- Denial of service
- CVSS 8.7 High
MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length
- themoos core-moos
- CWE-195
- CVSS 9.3 CriticalCritical · CVSS 9+
MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length
- themoos core-moos
- Memory corruption
- CVSS 8.8 High
MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity
- themoos core-moos
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
- themoos core-moos
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR
- themoos core-moos
- Authentication bypass