CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2018/12/17 3:29 p.m.•1 views

CVE-2018-20027

The yamlparse.load method in Pylearn2 allows code injection...

9.8CVSS5.8AI score0.00513EPSS

Exploits1References1

CVE•added 2018/12/17 3:0 p.m.•30 views

CVE-2018-20027

CVE-2018-20027: The NVD and related records identify that the yaml_parse.load method in Pylearn2 permits code injection, enabling remote impact via network exposure (CVSS v3.0: CRITICAL, 9.8; v2.0: HIGH, 7.5). The underlying issue is the use of yaml_parse.load, which can execute arbitrary code, w...

9.8CVSS9.6AI score0.00513EPSS

Exploits1References1Affected Software1