Scientificlinux - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2014-10-15.

Products

• Luci - 3 CVEs
• Scientificlinux - 0 CVEs

Newest CVEs of Scientificlinux

• CVE-2014-3593 - CVSS 6 (medium), 2014-10-15: Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster…
• CVE-2013-4482 - CVSS 6.2 (medium), 2013-11-23: Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscript, allows local users to gain…
• CVE-2013-4481 - CVSS 1.9 (low), 2013-11-23: Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users…