Lucene search
+L

4605 matches found

NVD
NVD
added 2022/09/05 10:15 a.m.28 views

CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS0.01892EPSS
SaveExploits0References5
OSV
OSV
added 2022/09/05 10:15 a.m.4 views

DEBIAN-CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.9AI score0.02526EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/05 10:15 a.m.6 views

DEBIAN-CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.7AI score0.01892EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/05 10:15 a.m.25 views

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS0.02061EPSS
SaveExploits0References5
NVD
NVD
added 2022/09/05 10:15 a.m.25 views

CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS0.02526EPSS
SaveExploits0References4
NVD
NVD
added 2022/09/05 10:15 a.m.16 views

CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS0.01253EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2022/09/05 10:15 a.m.5 views

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS5.8AI score0.02061EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2022/09/05 10:15 a.m.6 views

CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS5.8AI score0.01253EPSS
SaveExploits1References6
OSV
OSV
added 2022/09/05 10:15 a.m.4 views

DEBIAN-CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS7AI score0.02061EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/05 10:15 a.m.8 views

UBUNTU-CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.7AI score0.01253EPSS
SaveExploits1References5
Prion
Prion
added 2022/09/05 10:15 a.m.25 views

Stack overflow

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

4CVSS7.1AI score0.02526EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/09/05 10:15 a.m.8 views

UBUNTU-CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01892EPSS
SaveExploits0References5
Prion
Prion
added 2022/09/05 10:15 a.m.26 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

4CVSS7.7AI score0.02061EPSS
SaveExploits0References4Affected Software2
Prion
Prion
added 2022/09/05 10:15 a.m.44 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

4CVSS7.7AI score0.01892EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.46 views

CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01892EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.41 views

CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.8AI score0.01253EPSS
SaveExploits1References4
Prion
Prion
added 2022/09/05 10:15 a.m.23 views

Input validation

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

1.9CVSS7.1AI score0.01253EPSS
SaveExploits1References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/05 10:15 a.m.37 views

CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

6.5CVSS6.8AI score0.02526EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/09/05 12:00 a.m.38 views

Rails 代码问题漏洞

Rails is a set of open source web application frameworks based on the Ruby language by the American Rails team. Rails has a security vulnerability that stems from the fact that when serialized columns using YAML the default are deserialized, Rails uses YAML.unsafeload to transform the YAML data...

9.8CVSS7.5AI score0.02386EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2022/09/05 12:00 a.m.5 views

PT-2022-6916 · Snakeyaml +5 · Snakeyaml +5

Name of the Vulnerable Software and Affected Versions: snakeYAML affected versions not specified Description: The issue is related to the parsing of untrusted YAML files, which may lead to Denial of Service attacks. An attacker can supply content that causes the parser to crash due to a stack...

9CVSS6.6AI score0.22709EPSS
SaveExploits3References72
Rows per page
Query Builder