73 matches found
JLSEC-2026-23
The SingleDocParser::HandleNode function in yaml-cpp aka LibYaml-C++ 0.5.3 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...
EUVD-2019-15851
Malware in sbrugna...
EUVD-2017-17771
Malware in sbrugna...
EUVD-2018-13128
Malware in sbrugna...
Yaml-cpp Heap Buffer Overflow DoS
The vulnerability of the Scanner::EnsureTokensInQueue function in the C++ YAML library is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created YAML file...
Yaml-cpp Heap Buffer Overflow DoS
The vulnerability of the SingleDocParser::HandleNode function in the YAML handling library for C++ Yaml-cpp is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using a specially created...
CVE-2024-35060
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...
CVE-2024-37860
Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2amcl process...
CVE-2021-46364
A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file...
CVE-2021-31681
Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file...
CVE-2024-37863: Buffer Copy without Checking Size of Input
Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...
CVE-2024-37861: Buffer Copy without Checking Size of Input
Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...
CVE-2024-35060
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...
CVE-2024-35060
The NASA AIT-Core software suite, specifically version v2.5.2 , contains a vulnerability in its YAML Python library . An attacker can exploit this issue by supplying a crafted YAML file to achieve arbitrary command execution . As of the current documentation, there is no information regarding a n...
CVE-2024-35060
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...
CVE-2024-35060: Cleartext Transmission of Sensitive Information
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...
PYSEC-2024-263
Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafeload function at cli.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted YML file...
PT-2024-20808 · Open Robotics · Ros2 +1
Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions Description: A buffer overflow issue was discovered in the nav2 controller process, which can be triggered by sending a crafted .yaml file. Recommendations: For Open...
CVE-2024-25196
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2controller process. This vulnerability is triggerd via sending a crafted .yaml file...
