4600 matches found
CVE-2022-29215 Argument Injection in RegionProtect
RegionProtect is a plugin that allows users to manage certain events in certain regions of the world. Versions prior to 1.1.0 contain a YAML injection vulnerability that can cause an instant server crash if the passed arguments are not matched. Version 1.1.0 contains a patch for this issue. As a...
CVE-2022-29215
CVE-2022-29215 affects the RegionProtect plugin. Versions prior to 1.1.0 contain a YAML injection vulnerability that can cause an instant server crash when passed arguments do not match. Version 1.1.0 includes a patch for this issue. As a workaround, restrict operator permissions to untrusted use...
CVE-2022-28995
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
CVE-2022-28995
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
Remote code execution
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
CVE-2022-28995
CVE-2022-28995 affects Rengine v1.0.2. The vulnerability enables remote code execution via the YAML configuration function. The issue is confirmed across multiple sources (NVD, Red Hat, OSV, etc.). Practical impact is remote code execution with network access and no authentication required, as de...
CVE-2022-28995
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
CVE-2022-28995
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
Denial Of Service (DoS)
gopkg.in/yaml.v3 is vulnerable to denial of service. The vulnerability exists when the deserializing input data through the unmarshal function of yaml.go, allowing an attacker to crash the application by providing invalid YAML data...
gopkg.in/yaml.v3 Denial of Service
An issue in the Unmarshal function in Go-Yaml v3 can cause a program to panic when attempting to deserialize invalid input...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
DEBIAN-CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
UBUNTU-CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
Input validation
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
CVE-2022-28948 affects Go-Yaml v3 Unmarshal; a crash can occur when deserializing invalid input. Connected sources corroborate a Go-Yaml Unmarshal issue across advisories (e.g., Astra Linux, Debian, GHSA), with no explicit patch version in the provided documents. Exploitation status is not stated...