682 matches found
EUVD-2021-1404
Malware in sbrugna...
EUVD-2018-0619
Malware in sbrugna...
EUVD-2023-2088
Malicious code in bioql PyPI...
EUVD-2022-6769
Malicious code in bioql PyPI...
EUVD-2022-7446
Malicious code in bioql PyPI...
EUVD-2022-6773
Malicious code in bioql PyPI...
EUVD-2021-8632
Malicious code in bioql PyPI...
EUVD-2022-6753
Malicious code in bioql PyPI...
EUVD-2022-3355
Malicious code in bioql PyPI...
EUVD-2022-6839
Malicious code in bioql PyPI...
EUVD-2023-56110
Malicious code in bioql PyPI...
DoS in SnakeYAML
...
DoS in SnakeYAML
...
DoS in SnakeYAML
...
DoS in SnakeYAML
...
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
...
CVE-2025-56816
Datart 1.0.0-rc.3 is vulnerable to Directory Traversal. The configuration file handling of the application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. The application parses this file using SnakeYAML's unsafe load or loadAs method without input...
CVE-2025-56816: Improper Limitation of a Pathname to a Restricted Directory
Datart 1.0.0-rc.3 is vulnerable to Directory Traversal. The configuration file handling of the application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. The application parses this file using SnakeYAML's unsafe load or loadAs method without input...
Linux Distros Unpatched Vulnerability : CVE-2022-1471
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SnakeYaml's Constructor class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can...
