Lucene search
+L

6610 matches found

OpenVAS
OpenVAS
added 2021/04/06 12:0 a.m.7 views

Fedora: Security Advisory for libopenmpt (FEDORA-2021-248c19a8ce)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rapid7 Blog
Rapid7 Blog
added 2021/04/02 7:49 p.m.126 views

Metasploit Wrap-Up

Sprinkle on the Modules The first quarter of 2021 has given us wave after wave of Exchange vulnerabilities, and while our awesome contributors helped us continue coverage with another Exchange module we were able to add to Metasploit, we also added modules covering very heavy-hitting...

10CVSS0.9AI score0.99898EPSS
SaveExploits39
OSV
OSV
added 2021/04/01 6:15 p.m.6 views

DEBIAN-CVE-2021-3447

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...

5.5CVSS7.1AI score0.00333EPSS
SaveExploits0References1
PyPA
PyPA
added 2021/04/01 6:15 p.m.10 views

PYSEC-2021-107

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...

5.5CVSS6.4AI score0.00333EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/04/01 6:15 p.m.9 views

UBUNTU-CVE-2021-3447

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...

5.5CVSS6.9AI score0.00333EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/04/01 6:15 p.m.8 views

CVE-2021-3447

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...

5.5CVSS6.8AI score0.00333EPSS
SaveExploits0References9
Prion
Prion
added 2021/04/01 6:15 p.m.29 views

Design/Logic Flaw

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...

2.1CVSS5.3AI score0.00333EPSS
SaveExploits0References5Affected Software3
Cvelist
Cvelist
added 2021/04/01 12:0 a.m.35 views

CVE-2021-3447

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...

6AI score0.00333EPSS
SaveExploits0References5
CVE
CVE
added 2021/04/01 12:0 a.m.196 views

CVE-2021-3447

CVE-2021-3447 describes a vulnerability in several ansible modules where credentials and secrets logged in plain text on managed nodes or controller when verbose mode is used, not protected by no_log. Affected: Red Hat Ansible Automation Platform <1.2.2; Ansible Tower

5.5CVSS5.2AI score0.00333EPSS
SaveExploits0References5Affected Software2
HPE Security Bulletins
HPE Security Bulletins
added 2021/03/24 12:0 a.m.13 views

HPESBHF04105 rev.1 - HPE Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5) or Integrated Lights-Out 4 (iLO 4), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.33 - Please see the RESOLUTION note HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.77 - Please see th...

5.3CVSS6.2AI score0.01472EPSS
SaveExploits0
OSV
OSV
added 2021/03/22 7:15 p.m.10 views

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.5CVSS7.1AI score0.00727EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/03/22 7:15 p.m.4 views

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.5CVSS7AI score0.00727EPSS
SaveExploits0References2
Fedora
Fedora
added 2021/03/22 2:10 a.m.60 views

[SECURITY] Fedora 34 Update: varnish-modules-0.17.1-1.fc34

This is a collection of modules "vmods" extending Varnish VCL used for describing HTTP request/response policies with additional capabilities. This collection contains the following vmods: bodyaccess, header, saintmode, tcp, var, vsthrottle, xkey...

7.5CVSS0.8AI score0.01495EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the Blink display module in Google Chrome browsers allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s Blink rendering module relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

7.3CVSS7.7AI score0.0154EPSS
SaveExploits0References11Affected Software5
RedhatCVE
RedhatCVE
added 2021/03/16 8:37 p.m.32 views

CVE-2021-3447

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...

5.5CVSS3.9AI score0.00333EPSS
SaveExploits0References3
OSV
OSV
added 2021/03/16 3:15 p.m.9 views

CVE-2021-28543

Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service daemon restart in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, ...

7.5CVSS7.1AI score0.01495EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/16 3:15 p.m.42 views

CVE-2021-28543

Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service daemon restart in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, ...

7.5CVSS0.01495EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/03/16 3:15 p.m.5 views

CVE-2021-28543

Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service daemon restart in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, ...

7.5CVSS7.2AI score0.01495EPSS
SaveExploits0References4
Prion
Prion
added 2021/03/16 3:15 p.m.35 views

Null pointer dereference

Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service daemon restart in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, ...

5CVSS7.4AI score0.01495EPSS
SaveExploits0References2Affected Software3
UbuntuCve
UbuntuCve
added 2021/03/16 3:15 p.m.30 views

CVE-2021-28543

Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service daemon restart in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, ...

7.5CVSS7.1AI score0.01495EPSS
SaveExploits0References2
Rows per page
Query Builder