Security Vulnerabilities Related To CWE-470

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2017-7536	470		2018-01-10	2022-03-10	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue().
2	CVE-2018-5511	470	Exec Code	2018-04-13	2019-10-03	6.5	None	Remote	Low	???	Partial	Partial	Partial
On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
3	CVE-2019-3834	470		2019-10-03	2019-10-10	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON). This flaw allows attackers to manipulate ClassLoader properties on a vulnerable server. Exploits that have been published rely on ClassLoader properties that are exposed such as those in JON 3. Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/site/solutions/869353. Note that while multiple products released patches for the original CVE-2014-0114 flaw, the reversion described by this CVE-2019-3834 flaw only occurred in JON 3.
4	CVE-2019-10174	470		2019-11-25	2022-02-20	6.5	None	Remote	Low	???	Partial	Partial	Partial
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to introduce new, malicious behavior into the application.
5	CVE-2019-20635	470	Exec Code	2020-04-02	2020-08-24	4.3	None	Remote	Medium	Not required	None	Partial	None
codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields.
6	CVE-2019-1003040	470	Bypass	2019-03-28	2020-09-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
7	CVE-2019-1003041	470	Bypass	2019-03-28	2020-09-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin 2.64 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
8	CVE-2021-31522	470		2022-01-06	2022-01-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Kylin can receive user input and load any class through Class.forName(...). This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions; Apache Kylin 4 version 4.0.0 and prior versions.

Total number of vulnerabilities : 8 Page : 1 (This Page)