Lucene search
+L

269 matches found

Positive Technologies
Positive Technologies
•added 2024/11/08 12:00 a.m.•29 views

PT-2024-34416 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCms version 13.1 Description: The issue is related to a code injection vulnerability in the notification module of the member message notification module in the backend user module. This vulnerability occurs due to the unsafe handling of t...

8.8CVSS5.9AI score0.006EPSS
SaveExploits1References8
CVE
CVE
•added 2024/11/08 12:00 a.m.•98 views

CVE-2024-50808

SeaCms version 13.1 is vulnerable to code injection within the notification module of the member message notification module in the backend user module. The root cause is the unsafe handling of the "notify" variable in the admin_notify.php file. This vulnerability could allow an attacker to injec...

8.8CVSS5.9AI score0.006EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2024/11/08 12:00 a.m.•13 views

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

8.8CVSS5.9AI score0.006EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2024/11/07 4:05 a.m.•8 views

SUSE CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/11/06 12:31 p.m.•28 views

ansible-core Incorrect Authorization vulnerability

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References14Affected Software1
Snyk
Snyk
•added 2024/11/06 12:31 p.m.•4 views

Incorrect Authorization

Overview ansible-core is an a radically simple IT automation system. It handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration. Ansible makes complex changes like zero-downtime rolling updates with load...

6.3CVSS6.7AI score0.00259EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2024/11/06 10:15 a.m.•14 views

DEBIAN-CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/11/06 10:15 a.m.•13 views

AZL-52417 CVE-2024-9902 affecting package ansible for versions less than 2.17.11-1

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/11/06 10:15 a.m.•25 views

AZL-52384 CVE-2024-9902 affecting package ansible for versions less than 2.14.18-1

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/11/06 10:15 a.m.•15 views

UBUNTU-CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References7
Mend
Mend
•added 2024/11/06 9:56 a.m.•8 views

CVE-2024-9902

A flaw was found in Ansible. The ansible-core "user" module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the "user" module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References19
Cvelist
Cvelist
•added 2024/11/06 9:56 a.m.•43 views

CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS0.00259EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/11/06 9:56 a.m.•20 views

CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0
osv_cve
osv_cve
•added 2024/11/06 9:56 a.m.•26 views

CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.8AI score
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2024/11/06 9:56 a.m.•17 views

CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2024/11/06 6:29 a.m.•20 views

CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.6AI score0.00259EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/06 12:00 a.m.•15 views

Red Hat Ansible security vulnerabilities

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to distribute, manage, and program computer systems. A security vulnerability exists in Red Hat Ansible that stems from a flawed logic or insufficient security validation in the...

6.3CVSS6.7AI score0.00259EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/06 12:00 a.m.•3 views

CVE-2024-9902: Incorrect Authorization

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/17 12:00 a.m.•9 views

PT-2024-39926

Name of the Vulnerable Software and Affected Versions Ansible affected versions not specified Description A flaw was found in Ansible's ansible-core user module, allowing an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References71
CNNVD
CNNVD
•added 2024/07/24 12:00 a.m.•21 views

Dolibarr ERP/CRM security vulnerabilities

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in Dolibarr ERP/CRM versions...

5.5CVSS6.2AI score0.00679EPSS
SaveExploits0References2
Rows per page
Query Builder