Vulnerabilidades de [UNKNOWN]
CVEs publicadas que afetam produtos de [UNKNOWN]: 4 registro(s), com severidade, exploração e correções.
CVE-2020-1712
Alta · 7.8
CWE-416 31/03/2020
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where...
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
CVE-2018-14667
Crítica · 9.8
KEV Alta · 63 CWE-94 06/11/2018
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
CVE-2018-1061
Alta · 7.5
CWE-20 19/06/2018
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
CVE-2018-1060
Alta · 7.5
CWE-20 18/06/2018
Improper Input Validation em Python
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.