Lucene search
+L

476 matches found

Mageia
Mageia
added 2020/04/02 10:48 p.m.46 views

Updated python-yaml packages fix security vulnerability

Updated python-yaml packages fix security vulnerability: A vulnerability was discovered in the PyYAML library, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to...

10CVSS9.8AI score0.05299EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/04/02 12:0 a.m.33 views

EulerOS Virtualization for ARM 64 3.0.6.0 : PyYAML (EulerOS-SA-2020-1371)

According to the version of the PyYAML package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserializatio...

9.8CVSS7.2AI score0.06031EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2020/04/01 12:0 a.m.42 views

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2020-1371)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.05156EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/03/30 12:0 a.m.41 views

Fedora 31 : PyYAML (2020-bdb0bfa928)

New upstream release 5.3.1 rhbz1814882 - Fixes CVE-2020-1747 rhbz1807367,1809011 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

10CVSS7.5AI score0.05299EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/03/30 12:0 a.m.38 views

Fedora 30 : PyYAML (2020-40c35d7b37)

New upstream release 5.3.1 rhbz1814882 - Fixes CVE-2020-1747 rhbz1807367,1809011 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

10CVSS7.5AI score0.05299EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2020/03/29 1:58 a.m.70 views

CVE-2017-18342

In PyYAML before 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function...

9.8CVSS9.5AI score0.06031EPSS
SaveExploits1References2
Fedora
Fedora
added 2020/03/29 12:16 a.m.32 views

[SECURITY] Fedora 32 Update: PyYAML-5.3.1-1.fc32

YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python. PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML...

10CVSS1.7AI score0.05299EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/03/29 12:0 a.m.31 views

Fedora: Security Advisory for PyYAML (FEDORA-2020-e9741a6a15)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS9.8AI score0.05299EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/03/29 12:0 a.m.23 views

Fedora: Security Advisory for PyYAML (FEDORA-2020-bdb0bfa928)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS9.8AI score0.05299EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/03/29 12:0 a.m.21 views

Fedora: Security Advisory for PyYAML (FEDORA-2020-40c35d7b37)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS9.8AI score0.05299EPSS
SaveExploits1References2
Fedora
Fedora
added 2020/03/27 1:10 p.m.25 views

[SECURITY] Fedora 31 Update: PyYAML-5.3.1-1.fc31

YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python. PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML...

10CVSS1.7AI score0.05299EPSS
SaveExploits1
Fedora
Fedora
added 2020/03/27 10:46 a.m.41 views

[SECURITY] Fedora 30 Update: PyYAML-5.3.1-1.fc30

YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python. PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML...

10CVSS1.7AI score0.05299EPSS
SaveExploits1
NVD
NVD
added 2020/03/24 3:15 p.m.25 views

CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS9.7AI score0.05299EPSS
SaveExploits1References10
OSV
OSV
added 2020/03/24 3:15 p.m.5 views

AZL-31783 CVE-2020-1747 affecting package PyYAML for versions less than 5.4.1-1

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS7.5AI score0.05299EPSS
SaveExploits1References1
OSV
OSV
added 2020/03/24 3:15 p.m.31 views

CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS5.3AI score0.05299EPSS
SaveExploits1References10
OSV
OSV
added 2020/03/24 3:15 p.m.2 views

DEBIAN-CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS8AI score0.05299EPSS
SaveExploits1References1
OSV
OSV
added 2020/03/24 3:15 p.m.5 views

ALPINE-CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS8.4AI score0.05299EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
added 2020/03/24 3:15 p.m.8 views

3di-cmd-client (>=0.0.1a0 <=0.0.3), aceui (>=1.0.2 <=1.0.21) +619 more potentially affected by CVE-2020-1747 via pyyaml (>=5.1.0 <=5.3.0b1)

pyyaml PYPI version =5.1.0, =0.0.1a0, =1.0.2, =0.2.15, =0.26.0, =0.0.1, =0.5.0, =1.1.0, =0.2.5, =0.95.7, =2.0.0, =1.0.28, =1.0.46 and more Source cves: CVE-2020-1747 Source advisory: OSV:PYSEC-2020-96...

10CVSS6.7AI score0.05299EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2020/03/24 3:15 p.m.30 views

CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

10CVSS7.4AI score0.05299EPSS
SaveExploits1References2
OSV
OSV
added 2020/03/24 3:15 p.m.5 views

UBUNTU-CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

9.8CVSS7.5AI score0.05299EPSS
SaveExploits1References3
Rows per page
Query Builder