Lucene search
+L

4532 matches found

SUSE CVE
SUSE CVE
added 2026/03/18 12:28 a.m.9 views

SUSE CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS6AI score0.00429EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/18 12:00 a.m.24 views

PT-2026-26065

Statamic is a Laravel and Git powered content management system CMS. Prior to versions 5.73.14 and 6.7.0, authenticated Control Panel users could read arbitrary .json, .yaml, and .csv files from the server by manipulating the file dictionary's filename configuration parameter in the fieldtype's...

4.3CVSS5.8AI score0.00348EPSS
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/17 7:49 a.m.8 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in js-yaml, minimatch, and react-router

Summary SPSS Collaboration and Deployment Services is affected by vulnerabilities in js-yaml CVE-2025-64718, minimatch CVE-2026-26996, CVE-2026-27903, CVE-2026-27904, react-router CVE-2025-59057, CVE-2025-68470, CVE-2026-21884, CVE-2026-22029, CVE-2026-22030. This has been addressed in the...

8.7CVSS6AI score0.00519EPSS
SaveExploits3Affected Software1
EUVD
EUVD
added 2026/03/17 12:31 a.m.11 views

EUVD-2026-12523

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS6AI score0.00429EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/16 11:16 p.m.16 views

ALPINE-CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS5.8AI score0.00429EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/16 11:16 p.m.10 views

CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS0.00429EPSS
SaveExploits0References8
OSV
OSV
added 2026/03/16 11:16 p.m.8 views

DEBIAN-CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS5.6AI score0.00429EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/03/16 11:16 p.m.10 views

CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS6.1AI score0.00429EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/16 11:16 p.m.10 views

UBUNTU-CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS6.1AI score0.00429EPSS
SaveExploits0References4
CVE
CVE
added 2026/03/16 10:30 p.m.45 views

CVE-2026-4177

CVE-2026-4177 affects YAML::Syck for Perl (versions up to 1.36). The advisory documents describe multiple vulnerabilities in the YAML emitter, including a high-severity heap-based buffer overflow when class names exceed 512 bytes, a base64 decoder that can read past the buffer end on trailing new...

9.1CVSS6AI score0.00429EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2026/03/16 10:30 p.m.34 views

CVE-2026-4177 YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

0.00429EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/16 10:30 p.m.8 views

CVE-2026-4177 YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS6.2AI score
SaveExploits0References12
AlpineLinux
AlpineLinux
added 2026/03/16 10:30 p.m.15 views

CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS5.5AI score0.00429EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/03/16 10:30 p.m.6 views

CVE-2026-4177 YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

6AI score0.00429EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/03/16 10:30 p.m.6 views

CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

9.1CVSS5.6AI score0.00429EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/03/16 12:00 a.m.17 views

YAML::Syck 安全漏洞

YAML::Syck is a Perl library open sourced by CPAN authors. Versions of YAML::Syck prior to 1.36 contained security vulnerabilities. These vulnerabilities were due to issues with the YAML emitter, such as heap buffer overflows, which could lead to memory corruption or information leaks...

9.1CVSS5.9AI score0.00429EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/16 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-4177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high- severity heap buffer overflow in the YAML emitter. Th...

9.1CVSS5.6AI score0.00429EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/15 12:00 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-YAML-LibYAML (UTSA-2026-006156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006156 advisory. YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified Tenable has extracted the preceding description block directly from t...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits1References4
NVD
NVD
added 2026/03/13 7:54 p.m.9 views

CVE-2026-31864

JumpServer is an open source bastion host and an operation and maintenance security audit system. a Server-Side Template Injection SSTI vulnerability exists in JumpServer's Applet and VirtualApp upload functionality. This vulnerability can only be exploited by users with administrative privileges...

6.8CVSS0.00347EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/13 7:22 p.m.3 views

CVE-2026-31864

JumpServer is an open source bastion host and an operation and maintenance security audit system. a Server-Side Template Injection SSTI vulnerability exists in JumpServer's Applet and VirtualApp upload functionality. This vulnerability can only be exploited by users with administrative privileges...

6.8CVSS6.2AI score0.00347EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder