Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2026/06/08 12:00 a.m.•19 views

TencentOS Server 4: python-ply (TSSA-2026:0434)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0434 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

9.8CVSS8.7AI score0.18807EPSS
SaveExploits4References2
Fedora
Fedora
•added 2026/03/29 12:18 a.m.•17 views

[SECURITY] Fedora 44 Update: python-ply-3.11-33.fc44

PLY is a straightforward lex/yacc implementation. Here is a list of its essential features: It is implemented entirely in Python. It uses LR-parsing which is reasonably efficient and well suited for larger grammars. PLY provides most of the standard lex/yacc features including support for empty...

9.8CVSS8.4AI score0.18807EPSS
SaveExploits4
osv_ubuntu
osv_ubuntu
•added 2026/01/20 7:15 p.m.•19 views

UBUNTU-CVE-2025-56005

An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Because pickle allows execution of embedded...

9.8CVSS8.9AI score0.18807EPSS
SaveExploits4References3
attackerkb
attackerkb
•added 2026/01/20 12:00 a.m.•13 views

CVE-2025-56005

An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Because pickle allows execution of embedded...

9.8CVSS9AI score0.18807EPSS
SaveExploits4References5
osv_cve
osv_cve
•added 2026/01/20 12:00 a.m.•17 views

CVE-2025-56005

An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Because pickle allows execution of embedded...

9.8CVSS6.4AI score
SaveExploits0References15
Debian CVE
Debian CVE
•added 2026/01/20 12:00 a.m.•17 views

CVE-2025-56005

An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Because pickle allows execution of embedded...

9.8CVSS8.9AI score0.18807EPSS
SaveExploits4
Rows per page
Query Builder