Skip to content
Noroxi

scientificlinux records

3 published records for vendor scientificlinux.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2014-3593
      24Monitor

      Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via

      MediumCVSS 6.0No exploitEPSS 1%

      scientificlinux · luciOct 15, 2014

    • CVE-2013-4482
      24Monitor

      Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscript, allows local user

      MediumCVSS 6.2No exploitEPSS 0%

      scientificlinux · luciNov 23, 2013

    • CVE-2013-4481
      7Monitor

      Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which a

      LowCVSS 1.9No exploitEPSS 0%

      scientificlinux · luciNov 23, 2013