Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2016-4000

jython: Unsafe deserialization leads to code execution

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

CVSS 3.0 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Debian Jython Project
Products
Debian Linux Jython
CVE-2013-2027

Jython creates executables class files with wrong permissions

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Jython Project Opensuse
Products
Jython Opensuse