8 CVEs matched to Callsign by name in NVD, none on CISA's Known Exploited list.
Back to the Callsign profile · Alternatives to Callsign · CVE RSS feed
Likely-exploited estimates here rest on a median of 2 EPSS observations per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.
BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign that is not followed by a NULL (\0) char…
Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign.
FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.
Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possible to inject any custom message (into existing v1…
| Year | Critical | High | Medium | Low | Unscored | Total |
|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 0 | 0 | 0 | 1 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 |
| 2024 | 0 | 1 | 2 | 0 | 0 | 3 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 |
| 2005 | 0 | 0 | 1 | 0 | 0 | 1 |
| 2001 | 0 | 1 | 0 | 0 | 0 | 1 |
EPSS is FIRST's estimate of the chance a CVE is exploited in the next 30 days. It measures likelihood, not impact.
| CVE | EPSS | Percentile |
|---|---|---|
| CVE-2005-4584 | 4.5% | 91% |
| CVE-2024-48259 | 0.9% | 59% |
| CVE-2001-0989 | 0.8% | 57% |
| CVE-2022-25507 | 0.5% | 41% |
| CVE-2026-48235 | 0.4% | 33% |
| CVE-2025-32885 | 0.2% | 13% |
| CVE-2024-41722 | 0.1% | 3.6% |
| CVE-2024-47127 | 0.1% | 1.4% |
Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in incs/remotes.inc.php where latitude, longitude, callsign, mph, altitude, and timestamp values parsed from external GPS trackin…
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possible to inject any custom message (into existing v1 networks) with any GID and Callsign via…
Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station_id or callsign.
In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks. This v…
In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks…
FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.
BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign that is not followed by a NULL (\0) character.
Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign.