Lucene search
+L

207 matches found

Debian CVE
Debian CVE
added 2020/09/11 12:00 a.m.80 views

CVE-2020-14330

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS6.9AI score0.00573EPSS
SaveExploits1
Mageia
Mageia
added 2020/09/05 9:34 a.m.84 views

Updated ansible package fixes security vulnerabilities

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

9.6CVSS1.5AI score0.00539EPSS
SaveExploits0References3
OSV
OSV
added 2020/09/05 9:34 a.m.16 views

MGASA-2020-0363 Updated ansible package fixes security vulnerabilities

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

9.6CVSS6.8AI score0.00539EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/09/01 7:32 p.m.10 views

Ansible: masked keys for uri module are exposed into content and json output

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS7.1AI score0.00573EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2020/07/14 6:50 p.m.37 views

CVE-2020-14330

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS2.6AI score0.00573EPSS
SaveExploits1References4
OSV
OSV
added 2019/01/09 11:29 p.m.6 views

ALPINE-CVE-2019-3498

In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.pagenotfound, leading to content spoofing in a 404 error page if a user fails to recognize th...

6.5CVSS6.7AI score0.03425EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/01/04 12:00 a.m.10 views

PT-2019-1680

Name of the Vulnerable Software and Affected Versions Django versions 1.11.x through 1.11.17 Django versions 2.0.x through 2.0.9 Django versions 2.1.x through 2.1.4 Description The issue is related to insufficient neutralization of special elements in output used by a downstream component. This c...

7.1CVSS6.7AI score0.03425EPSS
SaveExploits0References250
Rows per page
Query Builder