EUVD-2018-12605

Malware in sbrugna...

CVE-2018-20027

The yamlparse.load method in Pylearn2 allows code injection...

CVE-2018-20027

The yamlparse.load method in Pylearn2 allows code injection...

Code injection

The yamlparse.load method in Pylearn2 allows code injection...

CVE-2018-20027

CVE-2018-20027: The NVD and related records identify that the yaml_parse.load method in Pylearn2 permits code injection, enabling remote impact via network exposure (CVSS v3.0: CRITICAL, 9.8; v2.0: HIGH, 7.5). The underlying issue is the use of yaml_parse.load, which can execute arbitrary code, w...

CVE-2018-20027

The yamlparse.load method in Pylearn2 allows code injection...

PT-2018-15240

Name of the Vulnerable Software and Affected Versions Pylearn2 affected versions not specified Description The issue concerns the yaml parse.load method in Pylearn2, which allows code injection. Recommendations At the moment, there is no information about a newer version that contains a fix for...

CVE-2018-20027: Improper Control of Generation of Code

The yamlparse.load method in Pylearn2 allows code injection...

Lisa-lab/pylearn2 inventory in command execution vulnerability

The Pylearn2/config/yamlparse.load function suffers from a command execution vulnerability in its implementation, which allows an attacker to perform arbitrary code operations...