1071 matches found
ROS-20250819-12
Vulnerability of configuration management and remote Salt operations execution system is related to incorrect input data validation in the findfile method of the GitFS class. Exploitation of the vulnerability could allow an attacker to manipulate files and directories Vulnerability in the Salt...
ROS-20250819-13
A vulnerability in Salt's configuration management and remote execution system is related to the overwriting of the of the VirtKey class. Exploitation of the vulnerability could allow an attacker to bypass security restrictions. security Vulnerability in the system of configuration management and...
ROS-20250819-11
Vulnerability of configuration management and remote Salt operations execution system is related to incorrect input data validation in the findfile method of the GitFS class. Exploitation of the vulnerability could allow an attacker to manipulate files and directories Vulnerability in the Salt...
The vulnerability of the Ansible configuration management system, related to the disclosure of information through log files, allows a perpetrator to gain unauthorized access to the protected information.
The vulnerability of the Ansible configuration management system is related to the exposure of information through log files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Ansible configuration management system arises from improper validation of input data, allowing attackers to circumvent existing security restrictions.
The vulnerability of the Ansible configuration management system is related to incorrect validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
[SECURITY] Fedora 41 Update: sudo-1.9.17-2.p1.fc41
Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...
CVE-2025-38131
CVE-2025-38131 affects the Linux kernel coresight subsystem. The issue arises when enabling an active config via cscfg_csdev_enable_active_config() but the config could be deactivated via configfs/sysfs during unloading, potentially leading to use-after-free of config_desc after the module unload...
CVE-2024-43794
OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is availab...
CVE-2022-37254
DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting XSS via Background - System - system function - configuration management...
CVE-2019-15298
A problem was found in Centreon Web through 19.04.3. An authenticated command injection is present in the page include/configuration/configObject/traps-mibs/formMibs.php. This page is called from the Centreon administration interface. This is the mibs management feature that contains a file filin...
CVE-2018-4071
An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceTLGetTask.cgi executable is used to retrieve MSCII configuration values within the configuration manager of the AirLink ES450...
WordPress Security Research Series: Setting Up Your Research Lab
Welcome to Part 3 of the WordPress Security Research Beginner Series! If you haven’t yet, take a minute to check out the series introduction to get a sense of what this series is all about. You’ll also want to catch up on Part 1, where we dig into WordPress request architecture and hooks, and Par...
CGA-HRGC-6996-3X9Q
Bulletin has no description...
USN-7330-2: Ansible regression
USN-7330-1 fixed vulnerabilities in Ansible. The update introduced a regression when attempting to install Ansible on Ubuntu 16.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ansible did not properly verify certain fiel...
CVE-2025-30107
On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery...
IROAD V Series 安全漏洞
IROAD V Series is a series of car recorders from IROAD. A security vulnerability exists in IROAD V Series that stems from improper configuration management of the CarLogger, which allows an unauthorized user to modify settings, disable critical functions and turn off battery protection, potential...
CVE-2025-30107: Missing Authorization
On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery...
PT-2025-11604
Name of the Vulnerable Software and Affected Versions IROAD V9 affected versions not specified Description A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery protection, potentially causing...
CVE-2025-30107
A security vulnerability exists in the configuration management of IROAD V9 (and the IROAD V Series ) dashcams. This flaw allows unauthorized parties to modify device settings, obtain sensitive data, and disable critical functions. Most notably, attackers can turn off battery protection , which c...