Lucene search
+L

7 matches found

Tenable Nessus
Tenable Nessus
•added 2026/04/21 12:00 a.m.•29 views

Alibaba Cloud Linux 3 : 0073: perl-YAML-Syck (ALINUX3-SA-2026:0073)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0073 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-4177: YAML::Syck versions through 1.36 for...

9.1CVSS8AI score0.00445EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/16 10:30 p.m.•92 views

CVE-2026-4177

The YAML::Syck Perl module (versions through 1.36 ) contains multiple security vulnerabilities. These include a high-severity heap buffer overflow in the YAML emitter triggered when class names exceed a 512-byte allocation, a buffer over-read in the base64 decoder due to trailing newlines, and da...

9.1CVSS8AI score0.00445EPSS
SaveExploits0References8Affected Software1
AlpineLinux
AlpineLinux
•added 2026/03/16 10:30 p.m.•24 views

CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS8AI score0.00445EPSS
SaveExploits0
osv_cve
osv_cve
•added 2025/10/17 9:15 p.m.•19 views

CVE-2025-62645

The Restaurant Brands International RBI assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative privileges for the entire platform via the createToken GraphQL mutation...

9.9CVSS6AI score0.00716EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/17 12:00 a.m.•13 views

CVE-2025-62645

The Restaurant Brands International RBI assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative privileges for the entire platform via the createToken GraphQL mutation...

9.9CVSS5.9AI score0.00716EPSS
SaveExploits1References5
Mend
Mend
•added 2024/04/08 2:26 p.m.•10 views

CVE-2024-31205

Saleor is an e-commerce platform. Starting in version 3.10.0 and prior to versions 3.14.64, 3.15.39, 3.16.39, 3.17.35, 3.18.31, and 3.19.19, an attacker may bypass cross-set request forgery CSRF validation when calling refresh token mutation with empty string. When a user provides an empty string...

5.4CVSS0.00193EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/04/08 12:00 a.m.•23 views

PT-2024-23849

Name of the Vulnerable Software and Affected Versions Saleor versions 3.10.0 through 3.14.63 Saleor versions 3.15.0 through 3.15.38 Saleor versions 3.16.0 through 3.16.38 Saleor versions 3.17.0 through 3.17.34 Saleor versions 3.18.0 through 3.18.30 Saleor versions 3.19.0 through 3.19.18 Descripti...

5.4CVSS6.7AI score0.00193EPSS
SaveExploits0References8
Rows per page
Query Builder