104 matches found
EulerOS 2.0 SP12 : libyaml (EulerOS-SA-2024-2218)
According to the versions of the libyaml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function...
EulerOS 2.0 SP8 : libyaml (EulerOS-SA-2024-2041)
According to the versions of the libyaml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function...
Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2024-2041)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP11 : libyaml (EulerOS-SA-2024-1838)
According to the versions of the libyaml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function...
EulerOS 2.0 SP11 : libyaml (EulerOS-SA-2024-1817)
According to the versions of the libyaml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function...
Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2024-1838)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2024-1817)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : libyaml (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libyaml: Heap-Based Buffer Overflow CVE-2024-3205 Note that Nessus has not tested for this issue but has instead...
CVE-2024-3205
A flaw was found in the libyaml library. A specially crafted YAML file can cause a heap-based buffer over-read in the yamlemitteremitflowsequenceitem function in the src/emitter.c file, resulting in denial of service in the application linked to the library. Mitigation Applications that do not...
CVE-2024-3205
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possible to reproduce nor exploit...
CVE-2024-3205
...
CVE-2024-3205
CVE-2024-3205 concerns the YAML LibYAML library. Connected advisories describe a heap-based buffer overflow in yaml_emitter_emit_flow_sequence_item, potentially exploitable remotely to cause code execution. Technical details vary by source, but all point to libyaml up to version 0.2.5 and a vulne...
Malicious code in wlwz-2312-3205 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 224dd5e859acafaa744ebde4fe75464e0ac4720b6f379e2e2d4eab2160fdd778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-463 Malicious code in wlwz-2312-3205 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 224dd5e859acafaa744ebde4fe75464e0ac4720b6f379e2e2d4eab2160fdd778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for OS Command Injection in Websvn
CVE-2021-3205-websvn-2.6.0 This is a exploit of CVE-2021-3205...
Exploit for CVE-2021-3205
CVE-2021-3205-websvn-2.6.0 This is a exploit of CVE-2021-3205...
CVE-2023-3205
creationtimestamp| type| source ---|---|--- 2023-09-01 14:13:54+00:00| seen| https://t.me/cibsecurity/69628...
CVE-2023-3205 Inefficient Regular Expression Complexity in GitLab
An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content...
CVE-2023-3205
CVE-2023-3205 affects GitLab from all versions 15.11 up to before 16.1.5, all 16.2.x before 16.2.5, and all 16.3.x before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content. Remediation: upgrade to fixed releases 16.1.5, 16.2.5, or 16.3.1 (...
CVE-2023-3205 Inefficient Regular Expression Complexity in GitLab
An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content...