Lucene search
K

191 matches found

Tenable Nessus
Tenable Nessus
added 2022/03/18 12:0 a.m.36 views

Yokogawa CENTUM and Exaopc Improper Output Neutralization For Logs (CVE-2022-22151)

CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions fr...

8.1CVSS7.7AI score0.00773EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/02/09 10:0 p.m.29 views

Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS1.1AI score0.00568EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2022/02/09 10:0 p.m.28 views

GHSA-785X-QW4V-6872 Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

6.8CVSS5.8AI score0.00568EPSS
Exploits1References9
PyPA
PyPA
added 2020/09/11 6:15 p.m.5 views

PYSEC-2020-3

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS6.5AI score0.00568EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2020/09/11 12:0 a.m.72 views

CVE-2020-14330

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS6.9AI score0.00568EPSS
Exploits1
OSV
OSV
added 2020/09/05 9:34 a.m.10 views

MGASA-2020-0363 Updated ansible package fixes security vulnerabilities

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

9.6CVSS6.8AI score0.00539EPSS
Exploits0References4
Mageia
Mageia
added 2020/09/05 9:34 a.m.47 views

Updated ansible package fixes security vulnerabilities

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

9.6CVSS1.5AI score0.00539EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2020/09/01 7:32 p.m.1 views

Ansible: masked keys for uri module are exposed into content and json output

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS7.1AI score0.00568EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2020/07/14 6:50 p.m.31 views

CVE-2020-14330

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS2.6AI score0.00568EPSS
Exploits1References4
OSV
OSV
added 2019/01/09 11:29 p.m.2 views

ALPINE-CVE-2019-3498

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.pagenotfound, leading to content spoofing in a 404 error page if a user fails to recognize th...

6.5CVSS6.7AI score0.03792EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2019/01/04 12:0 a.m.6 views

PT-2019-1680 · Django Software Foundation +2 · Django +2

Name of the Vulnerable Software and Affected Versions: Django versions 1.11.x through 1.11.17 Django versions 2.0.x through 2.0.9 Django versions 2.1.x through 2.1.4 Description: The issue is related to insufficient neutralization of special elements in output used by a downstream component. This...

9.8CVSS6.3AI score0.99856EPSS
Exploits40References186
Rows per page
Query Builder