Lucene search
K

153 matches found

CNNVD
CNNVD
added 2025/05/12 12:0 a.m.2 views

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software 安全漏洞

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool from Schweitzer Engineering Laboratories, Inc. that helps users quickly and easily configure the SEL Real-Time Automation Controller RTAC quickly and easily. A security vulnerability exists in...

6.6CVSS6.9AI score0.00481EPSS
Exploits0References2
Wolfi
Wolfi
added 2025/04/10 1:44 p.m.25 views

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: node-problem-detector, checksec, jitsucom-jitsu, elvish, glab, buildah, kubernetes-csi-external-resizer, pdfcpu, kubernetes-csi-external-attacher, task, guac, chartmuseum, sbomqs, ctop, temporal-server, distribution, kubernetes-dashboard-web, tekton-chains, karma,...

9.1CVSS6.8AI score0.00294EPSS
Exploits0
Wolfi
Wolfi
added 2025/04/10 1:44 p.m.10 views

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: node-problem-detector, checksec, jitsucom-jitsu, elvish, glab, buildah, kubernetes-csi-external-resizer, pdfcpu, kubernetes-csi-external-attacher, task, guac, chartmuseum, sbomqs, ctop, temporal-server, distribution, kubernetes-dashboard-web, tekton-chains, karma,...

5.4AI score
Exploits0
RedHat Linux
RedHat Linux
added 2025/03/24 5:53 p.m.9 views

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

8.8CVSS7.2AI score0.00121EPSS
Exploits0References2
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.11 views

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: node-problem-detector, checksec, trillian, descheduler, confluent-common-docker, elvish, sftpgo-plugin-geoipfilter, kubernetes-release, docker-credential-gcr, kubernetes-csi-external-resizer, pdfcpu, kubernetes-csi-external-attacher, nats, chartmuseum, sbomqs, ctop,...

5.4AI score
Exploits0
RedHat Linux
RedHat Linux
added 2025/01/28 7:20 p.m.10 views

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

8.8CVSS6.9AI score0.01038EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/01/28 12:0 a.m.21 views

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2025:0777)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0777 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

8.8CVSS7.1AI score0.01038EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2025/01/27 7:32 p.m.13 views

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

9.8CVSS6.9AI score0.00858EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.2 views

PT-2025-1746 · Nj-Series +1 · Nj Series +1

Name of the Vulnerable Software and Affected Versions: Machine Automation Controller NJ-series version 1.64.05 and lower Description: Path Traversal vulnerabilities exist in NJ/NX-series Machine Automation Controllers, allowing an attacker to perform unauthorized access and execute unauthorized...

6.6CVSS7.4AI score0.0009EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.2 views

ABB AC500 安全漏洞

ABB AC500 is a programmable logic controller PLC from ABB Switzerland. A security vulnerability exists in ABB AC500 V3 prior to version 3.8.0, which stems from a directory traversal vulnerability that could allow an authenticated attacker to inject arbitrary commands into a specially crafted file...

7.3CVSS6.8AI score0.00096EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2024/12/04 12:0 a.m.14 views

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Moderate) (RHSA-2024:10766)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10766 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

7.5CVSS7.6AI score0.00755EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/12/03 4:20 p.m.22 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS6.6AI score0.00096EPSS
Exploits0References5
CNVD
CNVD
added 2024/09/30 12:0 a.m.7 views

Advantech ADAM-5550 Information Disclosure Vulnerability

Advantech ADAM-5550 is a programmable automation controller from Advantech, China. The Advantech ADAM-5550 suffers from an information disclosure vulnerability due to a flaw in base64 encoding for sharing user credentials. An attacker can exploit this vulnerability to obtain credential informatio...

6.8CVSS6.2AI score0.00101EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/30 12:0 a.m.5 views

Advantech ADAM-5550 Cross-Site Scripting Vulnerability

Advantech ADAM-5550 is a programmable automation controller from Advantech, China. The Advantech ADAM-5550 suffers from a cross-site scripting vulnerability that stems from the device failing to properly eliminate malicious code when parsing HTTP requests to generate page output. An attacker can...

8.8CVSS6.3AI score0.00142EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/09/27 4:34 a.m.28 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

6.5CVSS6.6AI score0.67844EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/09/27 12:0 a.m.20 views

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:7312)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:7312 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

6.5CVSS6.8AI score0.67844EPSS
Exploits1References9
RedHat Linux
RedHat Linux
added 2024/09/18 4:7 p.m.63 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

9.8CVSS6.8AI score0.00216EPSS
Exploits1References5
NVD
NVD
added 2024/09/12 5:15 p.m.11 views

CVE-2024-6840

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via automountServiceAccountToken: true, resulting in privilege escalation to a service account...

6.6CVSS0.00083EPSS
Exploits0References3
Prion
Prion
added 2024/09/12 5:15 p.m.12 views

CVE-2024-6840

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via automountServiceAccountToken: true, resulting in privilege escalation to a service account...

0.00083EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/09/12 4:35 p.m.15 views

CVE-2024-6840 Automation-controller: gain access to the k8s api server via job execution with container group

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via automountServiceAccountToken: true, resulting in privilege escalation to a service account...

6.6CVSS7AI score0.00083EPSS
Exploits0References3
Rows per page
Query Builder