https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:31:16.665334+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07605 bdu:2023-07605 2026-10-02T21:31:17.501328+00:00 bdu:2023-07605 https://cve.radiocsirt.org/vuln/bell-cve-2017-18342 Withdrawn: BELL-CVE-2017-18342 — CVE-2017-18342 does not affect BellSoft software 2026-10-02T21:31:17.501401+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-ansible-cmdb-cve-2017-18342 BREW-ansible-cmdb-CVE-2017-18342 — PyYAML insecurely deserializes YAML strings leading to arbitrary code execution 2026-10-02T21:31:17.501449+00:00

Affected: Homebrew: ansible-cmdb

In PyYAML before 5.1, the `yaml.load()` API could execute arbitrary code. In other words, `yaml.safe_load` is not used.

This was intended to be fixed in 4.1, but due to [breaking changes](https://github.com/yaml/pyyaml/issues/192#issuecomment-401491470), 4.1 was yanked and 5.1 [contains](https://github.com/yaml/pyyaml/issues/207#issuecomment-472520007) the patch for CVE-2017-18342.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0395 certfr-2026-avi-0395 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T21:31:17.501504+00:00 certfr-2026-avi-0395 https://cve.radiocsirt.org/vuln/cnvd-2019-42857 cnvd-2019-42857 2026-10-02T21:31:17.501541+00:00 cnvd-2019-42857 https://cve.radiocsirt.org/vuln/euvd-2026-80130 EUVD-2026-80130 2026-10-02T21:31:17.501566+00:00 EUVD-2026-80130 https://cve.radiocsirt.org/vuln/fkie_cve-2017-18342 fkie_cve-2017-18342 2026-10-02T21:31:17.501586+00:00

In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.

 https://cve.radiocsirt.org/vuln/ghsa-rprw-h62v-c2w7 GHSA-rprw-h62v-c2w7 — PyYAML insecurely deserializes YAML strings leading to arbitrary code execution 2026-10-02T21:31:17.501620+00:00

Affected: PyPI: PyYAML

In PyYAML before 5.1, the `yaml.load()` API could execute arbitrary code. In other words, `yaml.safe_load` is not used.

This was intended to be fixed in 4.1, but due to [breaking changes](https://github.com/yaml/pyyaml/issues/192#issuecomment-401491470), 4.1 was yanked and 5.1 [contains](https://github.com/yaml/pyyaml/issues/207#issuecomment-472520007) the patch for CVE-2017-18342.

 https://cve.radiocsirt.org/vuln/gsd-2017-18342 gsd-2017-18342 2026-10-02T21:31:17.501655+00:00 gsd-2017-18342 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11108-1 openSUSE-SU-2024:11108-1 — oci-cli-3.0.2-1.2 on GA media 2026-10-02T21:31:17.501675+00:00

oci-cli-3.0.2-1.2 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2018-49 PYSEC-2018-49 2026-10-02T21:31:17.501707+00:00

Affected: PyPI: pyyaml

In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-18342 UBUNTU-CVE-2017-18342 2026-10-02T21:31:17.501746+00:00

Affected: Ubuntu:14.04:LTS: pyyaml, Ubuntu:16.04:LTS: pyyaml, Ubuntu:18.04:LTS: pyyaml

In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0054 WID-SEC-W-2024-0054 — IBM Security Verify Access: Mehrere Schwachstellen 2026-10-02T21:31:17.501791+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder komplexe Angriffe wie Cache Poisoning, Cross-Site-Scripting oder Session-Hijacking durchzuführen.