280 matches found
CVE-2020-2158
The CVE-2020-2158 entry affects Jenkins Literate Plugin versions 1.0 and earlier. The root cause is that the YAML parser is not configured to prevent instantiation of arbitrary types, enabling remote code execution. The impact is remote code execution with the plugin, and multiple sources identif...
CVE-2020-2158
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
PyYAML Input Validation Error Vulnerability
PyYAML is a Python based YAML parser and generator . There is an input validation error vulnerability in PyYAML, when the user loads a yaml file that the program does not trust through the fullload method or Fullloader method, it is easy to cause arbitrary code execution vulnerability, which can ...
[SECURITY] Fedora 30 Update: PyYAML-5.3-2.fc30
YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python. PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML...
[SECURITY] Fedora 31 Update: PyYAML-5.3-2.fc31
YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python. PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML...
CVE-2020-2121
Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CVE-2020-2123
Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
Remote code execution
Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
Remote code execution
Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CVE-2020-2123
The CVE-2020-2123 entry maps to a RCE in the Jenkins RadarGun Plugin (versions 1.7 and earlier) caused by misconfigured YAML parsing that allows arbitrary types to be instantiated. Public references in GHSA/OSV/NVD entries confirm the root cause is unsafe YAML deserialization within RadarGun plug...
CVE-2020-2123
Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CVE-2020-2121
Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CVE-2020-2121
The CVE-2020-2121 issue affects Jenkins Google Kubernetes Engine Plugin versions 0.8.0 and earlier. The root cause is the plugin’s YAML parser configuration that permits instantiation of arbitrary types, enabling remote code execution. The vulnerability is exploitable by users who can supply YAML...
PT-2020-15330 · Jenkins · Jenkins Radargun Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins RadarGun Plugin versions 1.7 and earlier Description: The issue is related to the configuration of the YAML parser in the Jenkins RadarGun Plugin, which does not prevent the instantiation of arbitrary types. This results in a remote...
PT-2020-15328 · Jenkins · Jenkins Google Kubernetes Engine Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Google Kubernetes Engine Plugin versions 0.8.0 and earlier Description: The issue is related to the configuration of the YAML parser in the Jenkins Google Kubernetes Engine Plugin, which does not prevent the instantiation of arbitrary...
SnakeYAML Denial of Service Vulnerability
SnakeYAML is a Java-based YAML parser . A security vulnerability exists in the Alias feature in SnakeYAML version 1.18. An attacker can exploit this vulnerability to cause a denial of service...
Fedora Update for PyYAML FEDORA-2019-bed9afe622
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 30 Update: PyYAML-5.1-1.fc30
YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python. PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML...
yaml-cpp denial of service vulnerability (CNVD-2019-03332)
yaml-cpp aka LibYaml-C++ is a C++ parser for use in YAML. A denial of service vulnerability exists in the 'Scanner::EnsureTokensInQueue' function in yaml-cpp version 0.6.2. A remote attacker can exploit this vulnerability to cause a denial of service stack consumption and application crash with t...