Lucene search
+L

476 matches found

Mageia
Mageia
added 2020/04/02 10:48 p.m.48 views

Updated python-yaml packages fix security vulnerability

Updated python-yaml packages fix security vulnerability: A vulnerability was discovered in the PyYAML library, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to...

10CVSS9.8AI score0.05398EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/04/02 12:0 a.m.33 views

EulerOS Virtualization for ARM 64 3.0.6.0 : PyYAML (EulerOS-SA-2020-1371)

According to the version of the PyYAML package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserializatio...

9.8CVSS7.2AI score0.0561EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2020/04/01 12:0 a.m.43 views

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2020-1371)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.0561EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2020/03/30 12:0 a.m.38 views

Fedora 30 : PyYAML (2020-40c35d7b37)

New upstream release 5.3.1 rhbz1814882 - Fixes CVE-2020-1747 rhbz1807367,1809011 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

10CVSS7.5AI score0.05398EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/03/30 12:0 a.m.41 views

Fedora 31 : PyYAML (2020-bdb0bfa928)

New upstream release 5.3.1 rhbz1814882 - Fixes CVE-2020-1747 rhbz1807367,1809011 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

10CVSS7.5AI score0.05398EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2020/03/29 1:58 a.m.73 views

CVE-2017-18342

In PyYAML before 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function...

9.8CVSS9.5AI score0.0561EPSS
SaveExploits1References2
Fedora
Fedora
added 2020/03/29 12:16 a.m.33 views

[SECURITY] Fedora 32 Update: PyYAML-5.3.1-1.fc32

YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python. PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML...

10CVSS1.7AI score0.05398EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/03/29 12:0 a.m.32 views

Fedora: Security Advisory for PyYAML (FEDORA-2020-e9741a6a15)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS9.8AI score0.05398EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/03/29 12:0 a.m.21 views

Fedora: Security Advisory for PyYAML (FEDORA-2020-40c35d7b37)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS9.8AI score0.05398EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/03/29 12:0 a.m.23 views

Fedora: Security Advisory for PyYAML (FEDORA-2020-bdb0bfa928)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS9.8AI score0.05398EPSS
SaveExploits1References2
Fedora
Fedora
added 2020/03/27 1:10 p.m.26 views

[SECURITY] Fedora 31 Update: PyYAML-5.3.1-1.fc31

YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python. PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML...

10CVSS1.7AI score0.05398EPSS
SaveExploits1
Fedora
Fedora
added 2020/03/27 10:46 a.m.41 views

[SECURITY] Fedora 30 Update: PyYAML-5.3.1-1.fc30

YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python. PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML...

10CVSS1.7AI score0.05398EPSS
SaveExploits1
OSV
OSV
added 2020/03/24 3:15 p.m.2 views

DEBIAN-CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS8AI score0.05398EPSS
SaveExploits1References1
OSV
OSV
added 2020/03/24 3:15 p.m.31 views

CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS5.3AI score0.05398EPSS
SaveExploits1References10
OSV
OSV
added 2020/03/24 3:15 p.m.5 views

AZL-31783 CVE-2020-1747 affecting package PyYAML for versions less than 5.4.1-1

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS7.5AI score0.05398EPSS
SaveExploits1References1
OSV
OSV
added 2020/03/24 3:15 p.m.5 views

ALPINE-CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS8.4AI score0.05398EPSS
SaveExploits1References1
NVD
NVD
added 2020/03/24 3:15 p.m.26 views

CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS9.7AI score0.05398EPSS
SaveExploits1References10
OSV
OSV
added 2020/03/24 3:15 p.m.5 views

UBUNTU-CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS7.5AI score0.05398EPSS
SaveExploits1References3
OSV
OSV
added 2020/03/24 3:15 p.m.7 views

PYSEC-2020-96

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS7.5AI score0.05398EPSS
SaveExploits1References10
Prion
Prion
added 2020/03/24 3:15 p.m.31 views

Input validation

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS9.5AI score0.05398EPSS
SaveExploits1References10Affected Software4
Rows per page
Query Builder