Skip to content
OpenAdvisories

Archive

8 December 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.8
    CVE-2021-43811 Public exploit

    Code injection via unsafe YAML loading

    Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary c…

  • High 8.8
    CVE-2021-20039 Public exploit EPSS 79%

    Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method all…