Skip to content
OpenAdvisories

Archive

13 February 2015

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —

    Jython Improper Access Restrictions vulnerability

    Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

  • Medium —

    Information disclosure in JBoss Weld

    Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.