4608 matches found
OPENSUSE-SU-2023:0009-1 Security update for rubygem-activerecord-5.2
This update for rubygem-activerecord-5.2 fixes the following issues: - CVE-2022-32224: Fixed possible remote code execution when using YAML serialized columns in Active Record boo1201465...
Kibana 7.9.0 < 7.14.1 Path Traversal
According to its self-reported version number, the Kibana application running on the remote host is prior to 7.14.1. It is, therefore, affected by : - A code execution vulnerability due to an older version of js-yaml CVE-2021-22150 - An HTML Injection due to a lack of sanitization of document...
Kibana 7.14.0 HTML Injection
According to its self-reported version number, the Kibana application running on the remote host is prior to 7.14.1. It is, therefore, affected by : - A code execution vulnerability due to an older version of js-yaml CVE-2021-22150 - An HTML Injection due to a lack of sanitization of document...
Kibana 7.10.2 < 7.14.1 Code Execution
According to its self-reported version number, the Kibana application running on the remote host is prior to 7.14.1. It is, therefore, affected by : - A code execution vulnerability due to an older version of js-yaml CVE-2021-22150 - An HTML Injection due to a lack of sanitization of document...
Denial Of Service (DoS)
github.com/go-yaml/yaml is vulnerable to Denial Of Service DoS. A malicious user is able to pass a large YAML document which consumes excessive amounts of CPU or memory, causing the application to crash...
Denial Of Service (DoS)
github.com/go-yaml/yaml is vulnerable to denial of service.The vulnerability exists in multiple functions of decode.go due to unbounded alias chasing which allows an attacker to cause an application crash via malicious input...
CVE-2021-4235
A flaw was found in go-yaml. This issue occurs due to unbounded alias chasing, where a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
YAML Go package vulnerable to denial of service
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
GHSA-R88R-GMRH-7J83 YAML Go package vulnerable to denial of service
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
GHSA-6Q6Q-88XP-6F2R yaml package for Go can consume excessive amounts of CPU or memory
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
yaml package for Go can consume excessive amounts of CPU or memory
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
yaml package for Go can consume excessive amounts of CPU or memory
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
YAML Go package vulnerable to denial of service
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...
AZL-44035 CVE-2022-3064 affecting package podman 4.1.1-26
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
AZL-44514 CVE-2022-3064 affecting package buildah for versions less than 1.41.4-2
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
AZL-44067 CVE-2022-3064 affecting package delve 1.5.0-16
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
AZL-44610 CVE-2022-3064 affecting package podman for versions less than 5.6.1-2
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
DEBIAN-CVE-2022-3064
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...
