[UNKNOWN] vulnerabilities
Published CVEs affecting [UNKNOWN] products: 4 record(s), with severity, exploitation and fixes.
CVE-2020-1712
High · 7.8
CWE-416 Mar 31, 2020
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where...
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
CVE-2018-14667
Critical · 9.8
KEV High · 63 CWE-94 Nov 6, 2018
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
CVE-2018-1061
High · 7.5
CWE-20 Jun 19, 2018
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
CVE-2018-1060
High · 7.5
CWE-20 Jun 18, 2018
Improper Input Validation in Python
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.