Scientificlinux

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-3593 Oct 15, 14:55 MEDIUM This Month

Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable. No vendor patch available.

RCE Python Code Injection Luci Scientificlinux

NVD

CVSS 2.0

6.0

EPSS

0.3%

CVE-2013-4482 Nov 23, 11:55 MEDIUM This Month

Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse .egg-info file in. Rated medium severity (CVSS 6.2). No vendor patch available.

Python Information Disclosure Red Hat Enterprise Linux Luci +1

NVD

CVSS 2.0

6.2

EPSS

0.1%

CVE-2013-4481 Nov 23, 11:55 LOW Monitor

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive. Rated low severity (CVSS 1.9). No vendor patch available.

Information Disclosure Race Condition Red Hat Enterprise Linux Luci +1

NVD

CVSS 2.0

1.9

EPSS

0.0%

CVE-2014-3593

EPSS 0% CVSS 6.0

MEDIUM This Month

RCE Python Code Injection +2

NVD

CVE-2013-4482

EPSS 0% CVSS 6.2

MEDIUM This Month

Python Information Disclosure Red Hat +3

NVD

CVE-2013-4481

EPSS 0% CVSS 1.9

LOW Monitor

Information Disclosure Race Condition Red Hat +3

NVD