Lucene search
+L

30 matches found

Tenable Nessus
Tenable Nessus
•added 2021/02/01 12:00 a.m.•52 views

Fedora 32 : PyYAML (2021-eed7193502)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-eed7193502 advisory. - A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it process...

10CVSS7.9AI score0.05984EPSS
SaveExploits3References3
RedHat Linux
RedHat Linux
•added 2020/11/04 1:25 a.m.•10 views

PyYAML: arbitrary command execution through python/object/new when FullLoader is used

A vulnerability was discovered in the PyYAML library, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. ...

10CVSS7.9AI score0.05442EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2020/08/31 12:00 a.m.•27 views

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2020-1912)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.05442EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/05/27 12:00 a.m.•13 views

PT-2021-3478

Name of the Vulnerable Software and Affected Versions PyYAML versions prior to 5.4 Description A flaw in the PyYAML library allows for arbitrary code execution when processing untrusted YAML files through the full load method or with the FullLoader loader. This issue enables an attacker to execut...

10CVSS7.8AI score0.05984EPSS
SaveExploits2References98
OSV
OSV
•added 2020/03/24 3:15 p.m.•10 views

ALPINE-CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS7.8AI score0.05442EPSS
SaveExploits1References1
OSV
OSV
•added 2020/03/24 3:15 p.m.•5 views

DEBIAN-CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS7.8AI score0.05442EPSS
SaveExploits1References1
OSV
OSV
•added 2020/03/24 3:15 p.m.•15 views

PYSEC-2020-96

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS7.8AI score0.05442EPSS
SaveExploits1References10
Mend
Mend
•added 2020/03/24 1:56 p.m.•5 views

CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS0.05442EPSS
SaveExploits2References37
Debian CVE
Debian CVE
•added 2020/03/24 1:56 p.m.•69 views

CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS7.8AI score0.05442EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•5 views

CVE-2020-1747: Improper Input Validation

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS7.9AI score0.05442EPSS
SaveExploits1References3
Rows per page
Query Builder