Lucene search
+L

630 matches found

Veracode
Veracode
added 2022/09/06 5:56 a.m.48 views

Denial Of Service (DoS)

snakeyaml is vulnerable to Denial Of Service DoS. The vulnerability exists in the Composer function of Composer.java as it does not properly restrict the nested depth limitation for collections, allowing an attacker to crash the application through the stack overflow by providing malicious yaml...

6.5CVSS6.6AI score0.01047EPSS
SaveExploits1References8Affected Software3
OSV
OSV
added 2022/09/06 12:0 a.m.8 views

GHSA-HHHW-99GJ-P3C3 snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

5.5CVSS6.7AI score0.01047EPSS
SaveExploits1References7
OSV
OSV
added 2022/09/06 12:0 a.m.5 views

GHSA-C4R9-R8FH-9VJ2 snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.0165EPSS
SaveExploits0References8
OSV
OSV
added 2022/09/06 12:0 a.m.8 views

GHSA-98WM-3W3Q-MW94 snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01515EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/09/06 12:0 a.m.29 views

snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS7AI score0.01515EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
added 2022/09/06 12:0 a.m.40 views

snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DoS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.8AI score0.02101EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/09/06 12:0 a.m.18 views

GHSA-9W3M-GQGF-C4P9 snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DoS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.8AI score0.02101EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/09/06 12:0 a.m.84 views

snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS7.2AI score0.0165EPSS
SaveExploits0References8Affected Software7
Github Security Blog
Github Security Blog
added 2022/09/06 12:0 a.m.36 views

snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.4AI score0.01047EPSS
SaveExploits1References7Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/09/06 12:0 a.m.30 views

Out-of-bounds Write

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.0165EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2022/09/05 10:15 a.m.27 views

CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS0.01515EPSS
SaveExploits0References5
NVD
NVD
added 2022/09/05 10:15 a.m.22 views

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS0.0165EPSS
SaveExploits0References5
NVD
NVD
added 2022/09/05 10:15 a.m.23 views

CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS0.02101EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/09/05 10:15 a.m.11 views

CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS5.8AI score0.02101EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/09/05 10:15 a.m.4 views

CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS5.8AI score0.01047EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2022/09/05 10:15 a.m.5 views

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS5.8AI score0.0165EPSS
SaveExploits0References6
NVD
NVD
added 2022/09/05 10:15 a.m.14 views

CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS0.01047EPSS
SaveExploits1References5
OSV
OSV
added 2022/09/05 10:15 a.m.2 views

DEBIAN-CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS7AI score0.0165EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/05 10:15 a.m.3 views

DEBIAN-CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

5.5CVSS6.4AI score0.01047EPSS
SaveExploits1References1
Prion
Prion
added 2022/09/05 10:15 a.m.22 views

Stack overflow

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

4CVSS7.1AI score0.02101EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder