44 matches found
yolo-blog.com Cross Site Scripting vulnerability OBB-4041680
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2025-25295
Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and YOLO export functionalities. These functions invoke a...
PT-2025-7074
Name of the Vulnerable Software and Affected Versions: Label Studio versions prior to 1.16.0 Label Studio SDK versions prior to 1.0.10 Description: A path traversal vulnerability in Label Studio SDK allows unauthorized file access outside the intended directory structure. The flaw exists in the...
CVE-2025-25295: Improper Limitation of a Pathname to a Restricted Directory
Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and YOLO export functionalities. These functions invoke a...
PYSEC-2024-154 A number of releases of ultralytics contained malicious crypto miner software.
Ultralytics has identified a supply chain attack affecting affecting multiple versions of the ultralytics package. The compromised versions contained unauthorized code that downloaded and executed cryptocurrency mining software when instantiating YOLO models. This code was injected into the PyPI...
Malicious Embedded Code
Overview ultralytics is an Ultralytics YOLOv8 for SOTA object detection, multi-object tracking, instance segmentation, pose estimation and image classification. Affected versions of this package are vulnerable to Malicious Embedded Code. These versions have been compromised to install an xmrig...
CVE-2021-31681
Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file...
CVE-2021-31681
Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file...
CVE-2021-31680
Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file...
CVE-2021-31681
Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file...
CVE-2021-31680
Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file...
Deserialization of untrusted data
Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file...
Deserialization of untrusted data
Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file...
PT-2023-12157
Name of the Vulnerable Software and Affected Versions yolo 3 versions affected versions not specified Description The issue allows attackers to execute arbitrary code via a crafted yaml file, leveraging a Deserialization of Untrusted Data vulnerability. Recommendations At the moment, there is no...
CVE-2021-31681
CVE-2021-31681 describes a Deserialization of Untrusted Data vulnerability in YOLO 3 where crafted YAML input can lead to arbitrary code execution. Affected: YOLO 3; Root cause: deserialization of untrusted data; Impact: high (confidentiality, integrity, and availability). CVSS 3.1 base score 7.8...
CVE-2021-31681: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file...
CVE-2021-31680: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file...
PT-2023-12156
Name of the Vulnerable Software and Affected Versions yolo 5 affected versions not specified Description The issue allows attackers to execute arbitrary code via a crafted yaml file, exploiting a Deserialization of Untrusted Data vulnerability. Recommendations At the moment, there is no informati...
CVE-2021-31680
CVE-2021-31680 affects the YOLOv5 software, described as a Deserialization of Untrusted Data vulnerability in yolo 5 that allows attackers to execute arbitrary code via a crafted YAML file. The NVD/CVE entry indicates high impact with CVSS 3.1 metrics (Local attack, No privileges required, User i...
