Archive
June 2013
Vulnerabilities first published in this month (UTC), newest first.
2 results · Clear filters · Feed
-
Critical —
Deserialization Code Execution in js-yaml
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation.
-
Critical 9.8
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …
KEV Mar 28, 2022