Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-2356

Malicious code in bioql PyPI...

8.8CVSS7.5AI score0.01294EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/08/21 5:15 p.m.•9 views

CVE-2023-39106

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...

8.8CVSS7.8AI score0.01294EPSS
SaveExploits1References2
OSV
OSV
•added 2023/08/21 5:15 p.m.•17 views

CVE-2023-39106

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...

8.8CVSS6.1AI score0.01294EPSS
SaveExploits1References1
NVD
NVD
•added 2023/08/21 5:15 p.m.•32 views

CVE-2023-39106

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...

8.8CVSS8.9AI score0.01294EPSS
SaveExploits1References1
Mend
Mend
•added 2023/08/21 12:00 a.m.•2 views

CVE-2023-39106

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...

8.8CVSS0.01294EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/08/21 12:00 a.m.•3 views

PT-2023-26782

Name of the Vulnerable Software and Affected Versions Nacos Spring Project versions 1.1.1 and earlier Description The issue allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component. This enables the attacker to potentially gain control over the system, leading t...

8.8CVSS6.7AI score0.01294EPSS
SaveExploits1References6
CVE
CVE
•added 2023/08/21 12:00 a.m.•105 views

CVE-2023-39106

CVE-2023-39106 concerns the Nacos Spring Project (v1.1.1 and earlier). The issue arises in the SnakeYamls Constructor(), used to parse YAML files, allowing a remote attacker to execute arbitrary code. The vulnerability is described consistently across multiple sources in the provided documents (N...

8.8CVSS8.9AI score0.01294EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/21 12:00 a.m.•3 views

CVE-2023-39106: Deserialization of Untrusted Data

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...

8.8CVSS8.3AI score0.01294EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/21 12:00 a.m.•16 views

Nacos Spring Project 代码问题漏洞

Nacos Spring Project is a Nacos Group open source project for discovering, configuring and managing cloud-native applications. A security vulnerability exists in Nacos Spring Project v.1.1.1 and earlier versions, which stems from a vulnerability that allows an attacker to execute arbitrary code v...

8.8CVSS8.4AI score0.01294EPSS
SaveExploits1References2
Rows per page
Query Builder