Lucene search
+L

488 matches found

OpenVAS
OpenVAS
added 2021/05/12 12:00 a.m.28 views

Ubuntu: Security Advisory (USN-4940-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.8AI score0.05984EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2021/05/10 2:19 p.m.414 views

USN-4940-1: PyYAML vulnerability

It was discovered that PyYAML incorrectly handled untrusted YAML files with the FullLoader loader. A remote attacker could possibly use this issue to execute arbitrary code...

10CVSS7.7AI score0.05984EPSS
SaveExploits1
OSV
OSV
added 2021/05/10 2:19 p.m.13 views

USN-4940-1 pyyaml vulnerability

It was discovered that PyYAML incorrectly handled untrusted YAML files with the FullLoader loader. A remote attacker could possibly use this issue to execute arbitrary code...

10CVSS7.3AI score0.05984EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/20 4:40 p.m.69 views

GHSA-3PQX-4FQF-J49F Deserialization of Untrusted Data in PyYAML

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342...

9.8CVSS9.8AI score0.05156EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2021/04/20 4:40 p.m.158 views

Deserialization of Untrusted Data in PyYAML

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342...

9.8CVSS3AI score0.05156EPSS
SaveExploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2021/04/20 4:14 p.m.72 views

Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS9.7AI score0.05442EPSS
SaveExploits1References16Affected Software1
OSV
OSV
added 2021/04/20 4:14 p.m.24 views

GHSA-6757-JP84-GXFX Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS7.5AI score0.05442EPSS
SaveExploits1References17
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2020:1285-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.4AI score0.05442EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2021/04/15 12:00 a.m.48 views

EulerOS Virtualization 2.9.1 : PyYAML (EulerOS-SA-2021-1723)

According to the version of the PyYAML package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when...

10CVSS8.3AI score0.05984EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2021/04/15 12:00 a.m.45 views

EulerOS Virtualization 2.9.0 : pyyaml (EulerOS-SA-2021-1755)

According to the version of the pyyaml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when...

10CVSS8.3AI score0.05984EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2021/04/13 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for pyyaml (EulerOS-SA-2021-1755)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8AI score0.05984EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/04/13 12:00 a.m.23 views

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2021-1723)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8AI score0.05984EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2021/04/09 12:30 p.m.68 views

Redcloud - Automated Red Team Infrastructure Deployement Using Docker

Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team Infrastructure using Docker. Harness the cloud's speed for your tools. Deploys in minutes. Use and manage it with its polished web interface. Ideal for your penetration tests, shooting ranges, red teaming and...

7.6AI score
SaveExploits0References2
OSV
OSV
added 2021/03/25 9:26 p.m.134 views

GHSA-8Q59-Q68H-6HV4 Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS8.1AI score0.05984EPSS
SaveExploits2References12
Github Security Blog
Github Security Blog
added 2021/03/25 9:26 p.m.122 views

Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS3.4AI score0.05984EPSS
SaveExploits1References11Affected Software1
Mageia
Mageia
added 2021/03/12 1:25 a.m.100 views

Updated python-yaml packages fix security vulnerability

A vulnerability was discovered in the PyYAML library, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw...

10CVSS9.9AI score0.05984EPSS
SaveExploits1References2
OSV
OSV
added 2021/03/12 1:25 a.m.14 views

MGASA-2021-0119 Updated python-yaml packages fix security vulnerability

A vulnerability was discovered in the PyYAML library, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw...

10CVSS9.7AI score0.05984EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/03/05 12:00 a.m.25 views

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2021-1565)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8AI score0.05984EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/03/04 12:00 a.m.45 views

EulerOS Virtualization for ARM 64 3.0.6.0 : PyYAML (EulerOS-SA-2021-1565)

According to the version of the PyYAML package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code...

10CVSS8.1AI score0.05984EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2021/02/23 12:00 a.m.41 views

Photon OS 1.0: Pyyaml PHSA-2021-1.0-0361

An update of the PyYAML package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0361. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14677...

10CVSS8.1AI score0.05984EPSS
SaveExploits1References2
Rows per page
Query Builder