Vendors / Linaro Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 3
Exploited now Linaro records in CISA KEV No Linaro vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02094 · Published 2022-11-18 · No fix listed CWE-94
Priority MEDIUM 43
In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01677 · Published 2022-10-13 · No fix listed CWE-94
Priority MEDIUM 43
An issue was discovered in Linaro LAVA before 2018.5.post1.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02433 · Published 2018-06-19 · No fix listed CWE-20
Priority LOW 32
An issue was discovered in Linaro LAVA before 2018.5.post1.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01481 · Published 2018-06-19 · No fix listed CWE-20
Priority LOW 31
In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, leading to excessive use of memory on the se…
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01068 · Published 2022-11-18 · No fix listed CWE-776
Priority LOW 30
An issue was discovered in Linaro LAVA before 2018.5.post1.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00876 · Published 2018-06-19 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
2 3 4 0 0
THREATIST.IORead the docs