Lucene search
+L

476 matches found

OpenVAS
OpenVAS
added 2021/02/02 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2021-1168)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.8AI score0.05984EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/02/02 12:0 a.m.34 views

Photon OS 3.0: Pyyaml PHSA-2021-3.0-0190

An update of the PyYAML package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14606...

10CVSS8.1AI score0.05984EPSS
SaveExploits1References2
Photon
Photon
added 2021/02/02 12:0 a.m.29 views

Critical Photon OS Security Update - PHSA-2021-0190

Updates of 'PyYAML' packages of Photon OS have been released...

10CVSS1.6AI score0.05984EPSS
SaveExploits1
Photon
Photon
added 2021/02/02 12:0 a.m.27 views

Critical Photon OS Security Update - PHSA-2021-3.0-0190

Updates of 'PyYAML' packages of Photon OS have been released...

10CVSS1.6AI score0.05984EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:0 a.m.47 views

Fedora 32 : PyYAML (2021-eed7193502)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-eed7193502 advisory. - A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it process...

10CVSS8.4AI score0.05984EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:0 a.m.52 views

CentOS 8 : python38:3.8 (CESA-2020:4641)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4641 advisory. - PyYAML: command execution through python/object/apply constructor in FullLoader CVE-2019-20477 - python: infinite loop in the tarfile module via...

10CVSS7.8AI score0.12389EPSS
SaveExploits3References6
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:0 a.m.58 views

EulerOS 2.0 SP8 : PyYAML (EulerOS-SA-2021-1168)

According to the version of the PyYAML packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - YAML is a data serialization format designed for human readability andinteraction with scripting languages. PyYAML is a YAML parser andemitter for...

10CVSS7.4AI score0.05984EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/01/25 12:0 a.m.47 views

Fedora 33 : PyYAML (2021-3342569a0f)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-3342569a0f advisory. - A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it process...

10CVSS8.4AI score0.05984EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2021/01/23 12:0 a.m.29 views

Fedora: Security Advisory for PyYAML (FEDORA-2021-3342569a0f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8AI score
SaveExploits0References2
Huntr
Huntr
added 2020/12/21 12:0 a.m.7 views

Code Injection in mozilla/deepspeech

Description Arbitrary Code Excecution in mozilla/DeepSpeech.DeepSpeech is an open source embedded offline, on-device speech-to-text engine which can run in real time on devices ranging from a Raspberry Pi 4 to high power GPU servers. Technical Description This package was vulnerable to Arbitrary...

0.8AI score
SaveExploits0References1
Huntr
Huntr
added 2020/12/21 12:0 a.m.15 views

Code Injection in tensorflow/models

Description Arbitrary Code Excecution in Tensorflow/Models.The TensorFlow Model Garden is a repository with a number of different implementations of state-of-the-art SOTA models and modeling solutions for TensorFlow users. We aim to demonstrate the best practices for modeling so that TensorFlow...

3.9AI score
SaveExploits0References1
Hacker One
Hacker One
added 2020/12/05 2:20 p.m.23 views

Kubernetes: Code Injection via Insecure Yaml.load

Report Submission Form Summary: The Kubernetes repo and tool, test-infra, uses the insecure yaml.load function to set or update the Gubernator configuration with a yaml file which allows for code injection. Vulnerable Line of Code:...

0.5AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/04 6:2 a.m.26 views

Security Bulletin: Vulnerability in PyYAML affects IBM Spectrum Protect Plus Container and Microsoft File Systems Agents (CVE-2020-1747)

Summary There is a vulnerability in PyYAML that could allow a remote attacker to execute arbitrary code on the system. This vulnerability may affect the IBM Spectrum Protect Plus Container agent for Kubernetes and the IBM Spectrum Protect Plus Microsoft® Windows File Systems agent. Vulnerability...

10CVSS2.5AI score0.05299EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/11/06 12:0 a.m.44 views

EulerOS Virtualization 3.0.6.6 : PyYAML (EulerOS-SA-2020-2475)

According to the versions of the PyYAML package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS ...

9.8CVSS7AI score0.06031EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2020/11/05 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2020-2475)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.8AI score0.05299EPSS
SaveExploits2References2
RedHat Linux
RedHat Linux
added 2020/11/04 1:25 a.m.84 views

Moderate: Red Hat Security Advisory: python38:3.8 security, bug fix, and enhancement update

An update for the python38:3.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

10CVSS6.9AI score0.12389EPSS
SaveExploits3References9
Tenable Nessus
Tenable Nessus
added 2020/11/04 12:0 a.m.49 views

RHEL 8 : python38:3.8 (RHSA-2020:4641)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4641 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

10CVSS7.8AI score0.12389EPSS
SaveExploits3References16
AlmaLinux
AlmaLinux
added 2020/11/03 12:23 p.m.81 views

Moderate: python38:3.8 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following...

10CVSS8AI score0.12389EPSS
SaveExploits3References6
OSV
OSV
added 2020/11/03 12:23 p.m.50 views

ALSA-2020:4641 Moderate: python38:3.8 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following...

10CVSS7.8AI score0.12389EPSS
SaveExploits3References6
OSV
OSV
added 2020/11/03 12:23 p.m.41 views

RLSA-2020:4641 Moderate: python38:3.8 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following...

9.8CVSS7.8AI score0.12389EPSS
SaveExploits3References8
Rows per page
Query Builder