Lucene search
K

17 matches found

OSV
OSV
added 2026/02/09 11:36 a.m.6 views

BIT-CHECKOV-2021-3040 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted...

7.2CVSS6.4AI score0.03376EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-26387

Malware in sbrugna...

7.2CVSS7AI score0.03376EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-26392

Malware in sbrugna...

7.2CVSS7AI score0.03376EPSS
Exploits0References2
NVD
NVD
added 2021/06/10 1:15 p.m.10 views

CVE-2021-3040

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted...

7.2CVSS0.03376EPSS
Exploits0References1
OSV
OSV
added 2021/06/10 1:15 p.m.10 views

CVE-2021-3040

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted...

7.2CVSS7.7AI score0.03376EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/06/10 12:33 p.m.16 views

CVE-2021-3040 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted...

6.7CVSS7.5AI score0.03376EPSS
Exploits0References1
CVE
CVE
added 2021/06/10 12:33 p.m.42 views

CVE-2021-3040

Summary: CVE-2021-3040 describes an unsafe deserialization vulnerability in Bridgecrew Checkov (Prisma Cloud) that enables arbitrary code execution when processing a malicious Terraform file. The issue affects Checkov 2.0 versions earlier than 2.0.139; Checkov 1.0 is not affected. Affected softwa...

7.2CVSS7.1AI score0.03376EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/06/10 12:0 a.m.4 views

PT-2021-18726

Name of the Vulnerable Software and Affected Versions Checkov versions 2.0.0 through 2.0.138 Description An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. Recommendations For Checkov versions...

7.2CVSS6.4AI score0.03376EPSS
Exploits0References5
Palo Alto Networks
Palo Alto Networks
added 2021/06/09 4:0 p.m.56 views

Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted. Work around: Do not run Checkov on...

7.2CVSS6AI score0.03376EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/09 12:0 a.m.4 views

Bridgecrew Checkov 代码问题漏洞

Bridgecrew Checkov is an open source application. Static code analysis tool for infrastructure-as-code. Bridgecrew Checkov suffers from a code issue vulnerability that stems from insecure input validation when processing serialized data, which could allow a remote user to pass specially designed...

7.2CVSS7.7AI score0.03376EPSS
Exploits0References3
OSV
OSV
added 2021/04/20 4:15 a.m.14 views

CVE-2021-3035

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

7.2CVSS7.7AI score0.03376EPSS
Exploits0References1
NVD
NVD
added 2021/04/20 4:15 a.m.12 views

CVE-2021-3035

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

7.2CVSS0.03376EPSS
Exploits0References1
Prion
Prion
added 2021/04/20 4:15 a.m.17 views

Deserialization of untrusted data

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

6.5CVSS7.2AI score0.03376EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/20 3:15 a.m.13 views

CVE-2021-3035 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

6.7CVSS7.5AI score0.03376EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/19 12:0 a.m.8 views

Bridgecrew Checkov Has a Remote Code Execution Vulnerability

checkov a software application. Static code analysis tool for infrastructure i.e. code. Bridgecrew Checkov suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code while processing a malicious terraform file...

7.2CVSS8.2AI score0.03376EPSS
Exploits0References1
Palo Alto Networks
Palo Alto Networks
added 2021/04/14 4:0 p.m.53 views

Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted. Work around: Do not run Checkov on...

7.2CVSS6AI score0.03376EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.2 views

Bridgecrew Checkov 代码问题漏洞

checkov a software application. Static code analysis tool for infrastructure i.e. code. Bridgecrew Checkov suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code while processing a malicious terraform file...

7.2CVSS6.9AI score0.03376EPSS
Exploits0References4
Rows per page
Query Builder