739 matches found
CVE-2022-31691
Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support. This library allows for some...
Unsafe Deserialization
Apache Submarine is vulnerable to unsafe deserialization. The vulnerability is due to insecure YAML deserialization through the SnakeYAML library in the YamlEntityProvider component, which allows an attacker to supply malicious YAML payloads via REST API requests and potentially execute arbitrary...
CVE-2025-63721
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...
EUVD-2025-201789
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component allowing attackers to achieve RCE and take over the server...
CVE-2025-63721
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...
PT-2025-49569
Name of the Vulnerable Software and Affected Versions HummerRisk versions through 1.5.0 Description HummerRisk is affected by an issue stemming from a vulnerable Snakeyaml component, potentially allowing attackers to achieve Remote Code Execution RCE and gain control of the server. Recommendation...
CVE-2025-63721
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...
CVE-2025-63721: Deserialization of Untrusted Data
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...
CVE-2025-63721
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...
HummerCloud HummerRisk 安全漏洞
HummerCloud HummerRisk is an open source cloud-native security platform from China's HummerCloud, which solves security and governance issues in cloud-native environments in a non-intrusive way, with core capabilities including security governance for hybrid clouds and cloud-native security...
CVE-2025-63721
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...
CVE-2025-63721
HummerRisk versions through v1.5.0 are affected by a vulnerability involving a vulnerable Snakeyaml component. Attackers with normal user privileges can exploit the /rule/add API to achieve Remote Code Execution (RCE) and take over the server. To mitigate this issue, it is recommended to update H...
TencentOS Server 3: prometheus-jmx-exporter (TSSA-2023:0146)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0146 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
EUVD-2021-1404
Malware in sbrugna...
EUVD-2018-0619
Malware in sbrugna...
EUVD-2022-6839
Malicious code in bioql PyPI...
EUVD-2023-2088
Malicious code in bioql PyPI...
EUVD-2021-8632
Malicious code in bioql PyPI...