EUVD-2018-12605

Malware in sbrugna...

CVE-2018-20027

The yamlparse.load method in Pylearn2 allows code injection...

CVE-2018-20027

The yamlparse.load method in Pylearn2 allows code injection...

Code injection

The yamlparse.load method in Pylearn2 allows code injection...

CVE-2018-20027

CVE-2018-20027: The NVD and related records identify that the yaml_parse.load method in Pylearn2 permits code injection, enabling remote impact via network exposure (CVSS v3.0: CRITICAL, 9.8; v2.0: HIGH, 7.5). The underlying issue is the use of yaml_parse.load, which can execute arbitrary code, w...

CVE-2018-20027

The yamlparse.load method in Pylearn2 allows code injection...

Lisa-lab/pylearn2 inventory in command execution vulnerability

The Pylearn2/config/yamlparse.load function suffers from a command execution vulnerability in its implementation, which allows an attacker to perform arbitrary code operations...