Логотип exploitDog
bind:CVE-2019-20477
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-20477

Количество 7

Количество 7

ubuntu логотип

CVE-2019-20477

больше 5 лет назад

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.

CVSS3: 9.8
EPSS: Низкий
redhat логотип

CVE-2019-20477

больше 5 лет назад

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2019-20477

больше 5 лет назад

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2019-20477

больше 5 лет назад

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and ...

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-3pqx-4fqf-j49f

около 4 лет назад

Deserialization of Untrusted Data in PyYAML

CVSS3: 9.8
EPSS: Низкий
rocky логотип

RLSA-2020:4641

больше 4 лет назад

Moderate: python38:3.8 security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2020-4641

больше 4 лет назад

ELSA-2020-4641: python38:3.8 security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-20477

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.

CVSS3: 9.8
1%
Низкий
больше 5 лет назад
redhat логотип
CVE-2019-20477

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.

CVSS3: 9.8
1%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-20477

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.

CVSS3: 9.8
1%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-20477

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and ...

CVSS3: 9.8
1%
Низкий
больше 5 лет назад
github логотип
GHSA-3pqx-4fqf-j49f

Deserialization of Untrusted Data in PyYAML

CVSS3: 9.8
1%
Низкий
около 4 лет назад
rocky логотип
RLSA-2020:4641

Moderate: python38:3.8 security, bug fix, and enhancement update

больше 4 лет назад
oracle-oval логотип
ELSA-2020-4641

ELSA-2020-4641: python38:3.8 security, bug fix, and enhancement update (MODERATE)

больше 4 лет назад

Уязвимостей на страницу