Lucene search
+L

513 matches found

Tenable Nessus
Tenable Nessus
•added 2021/05/12 12:00 a.m.•48 views

Ubuntu 20.04 LTS : PyYAML vulnerability (USN-4940-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4940-1 advisory. It was discovered that PyYAML incorrectly handled untrusted YAML files with the FullLoader loader. A remote attacker could possibly use this issue to execute...

10CVSS7.8AI score0.05984EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2021/05/12 12:00 a.m.•32 views

Ubuntu: Security Advisory (USN-4940-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.4AI score0.05984EPSS
SaveExploits2References2
Ubuntu
Ubuntu
•added 2021/05/10 2:19 p.m.•418 views

USN-4940-1: PyYAML vulnerability

It was discovered that PyYAML incorrectly handled untrusted YAML files with the FullLoader loader. A remote attacker could possibly use this issue to execute arbitrary code...

10CVSS7.5AI score0.05984EPSS
SaveExploits2
OSV
OSV
•added 2021/05/10 2:19 p.m.•17 views

USN-4940-1 pyyaml vulnerability

It was discovered that PyYAML incorrectly handled untrusted YAML files with the FullLoader loader. A remote attacker could possibly use this issue to execute arbitrary code...

10CVSS7.5AI score0.05984EPSS
SaveExploits2References2
OSV
OSV
•added 2021/04/20 4:40 p.m.•73 views

GHSA-3PQX-4FQF-J49F Deserialization of Untrusted Data in PyYAML

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342...

9.8CVSS9.8AI score0.05114EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2021/04/20 4:40 p.m.•165 views

Deserialization of Untrusted Data in PyYAML

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342...

9.8CVSS3AI score0.05114EPSS
SaveExploits1References7Affected Software1
Github Security Blog
Github Security Blog
•added 2021/04/20 4:14 p.m.•73 views

Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS7.8AI score0.05442EPSS
SaveExploits1References16Affected Software1
OSV
OSV
•added 2021/04/20 4:14 p.m.•28 views

GHSA-6757-JP84-GXFX Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS7.8AI score0.05442EPSS
SaveExploits1References17
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•19 views

SUSE: Security Advisory (SUSE-SU-2020:1285-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.05442EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2021/04/15 12:00 a.m.•49 views

EulerOS Virtualization 2.9.1 : PyYAML (EulerOS-SA-2021-1723)

According to the version of the PyYAML package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when...

10CVSS7.8AI score0.05984EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2021/04/15 12:00 a.m.•45 views

EulerOS Virtualization 2.9.0 : pyyaml (EulerOS-SA-2021-1755)

According to the version of the pyyaml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when...

10CVSS7.8AI score0.05984EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2021/04/13 12:00 a.m.•23 views

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2021-1723)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.4AI score0.05984EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2021/04/13 12:00 a.m.•27 views

Huawei EulerOS: Security Advisory for pyyaml (EulerOS-SA-2021-1755)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.4AI score0.05984EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2021/04/09 12:30 p.m.•70 views

Redcloud - Automated Red Team Infrastructure Deployement Using Docker

Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team Infrastructure using Docker. Harness the cloud's speed for your tools. Deploys in minutes. Use and manage it with its polished web interface. Ideal for your penetration tests, shooting ranges, red teaming and...

7.6AI score
SaveExploits0References2
OSV
OSV
•added 2021/03/25 9:26 p.m.•139 views

GHSA-8Q59-Q68H-6HV4 Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS8.2AI score0.05984EPSS
SaveExploits3References12
Github Security Blog
Github Security Blog
•added 2021/03/25 9:26 p.m.•126 views

Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS8.1AI score0.05984EPSS
SaveExploits2References11Affected Software1
Mageia
Mageia
•added 2021/03/12 1:25 a.m.•102 views

Updated python-yaml packages fix security vulnerability

A vulnerability was discovered in the PyYAML library, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw...

10CVSS8.2AI score0.05984EPSS
SaveExploits2References2
OSV
OSV
•added 2021/03/12 1:25 a.m.•16 views

MGASA-2021-0119 Updated python-yaml packages fix security vulnerability

A vulnerability was discovered in the PyYAML library, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw...

10CVSS8.1AI score0.05984EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2021/03/05 12:00 a.m.•30 views

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2021-1565)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.4AI score0.05984EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2021/03/04 12:00 a.m.•45 views

EulerOS Virtualization for ARM 64 3.0.6.0 : PyYAML (EulerOS-SA-2021-1565)

According to the version of the PyYAML package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code...

10CVSS7.7AI score0.05984EPSS
SaveExploits3References2
Rows per page
Query Builder