Lucene search
K

226 matches found

CVE
CVE
added 2024/11/08 12:0 a.m.60 views

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the backend user module’s notification flow (member message notification) due to unsafe handling of the notify variable in admin_notify.php. The concrete affected component is the notification module within the backend user area; root cause is improp...

8.8CVSS7AI score0.00611EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/08 12:0 a.m.2 views

PT-2024-34416 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCms version 13.1 Description: The issue is related to a code injection vulnerability in the notification module of the member message notification module in the backend user module. This vulnerability occurs due to the unsafe handling of t...

8.8CVSS7.5AI score0.00611EPSS
Exploits1References8
SUSE CVE
SUSE CVE
added 2024/11/07 4:5 a.m.2 views

SUSE CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00222EPSS
Exploits0References5
Snyk
Snyk
added 2024/11/06 12:31 p.m.1 views

Incorrect Authorization

Overview ansible-core is an a radically simple IT automation system. It handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration. Ansible makes complex changes like zero-downtime rolling updates with load...

6.3CVSS7AI score0.00222EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2024/11/06 12:31 p.m.19 views

ansible-core Incorrect Authorization vulnerability

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.6AI score0.00222EPSS
Exploits0References14Affected Software1
OSV
OSV
added 2024/11/06 10:15 a.m.3 views

AZL-52417 CVE-2024-9902 affecting package ansible for versions less than 2.17.11-1

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS5.8AI score0.00222EPSS
Exploits0References1
OSV
OSV
added 2024/11/06 10:15 a.m.12 views

CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.1AI score0.00222EPSS
Exploits0References6
OSV
OSV
added 2024/11/06 10:15 a.m.2 views

AZL-52384 CVE-2024-9902 affecting package ansible for versions less than 2.14.18-1

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.9AI score0.00222EPSS
Exploits0References1
OSV
OSV
added 2024/11/06 10:15 a.m.3 views

DEBIAN-CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.8AI score0.00222EPSS
Exploits0References1
OSV
OSV
added 2024/11/06 10:15 a.m.0 views

UBUNTU-CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.8AI score0.00222EPSS
Exploits0References7
Cvelist
Cvelist
added 2024/11/06 9:56 a.m.23 views

CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS0.00222EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2024/11/06 9:56 a.m.13 views

CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.7AI score0.00222EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2024/11/06 9:56 a.m.13 views

CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.8AI score0.00222EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2024/11/06 6:29 a.m.11 views

CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS7AI score0.00222EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/06 12:0 a.m.2 views

Red Hat Ansible 安全漏洞

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to distribute, manage, and program computer systems. A security vulnerability exists in Red Hat Ansible that stems from a flawed logic or insufficient security validation in the...

6.3CVSS6.9AI score0.00222EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/09/17 12:0 a.m.1 views

PT-2024-39926

Name of the Vulnerable Software and Affected Versions Ansible affected versions not specified Description A flaw was found in Ansible's ansible-core user module, allowing an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a...

6.3CVSS6.8AI score0.00222EPSS
Exploits0References68
CNNVD
CNNVD
added 2024/07/24 12:0 a.m.1 views

Dolibarr ERP/CRM 安全漏洞

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in Dolibarr ERP/CRM versions...

5.5CVSS7.6AI score0.00679EPSS
Exploits0References2
NVD
NVD
added 2023/12/06 9:15 a.m.22 views

CVE-2023-49244

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS0.00443EPSS
Exploits0References2
OSV
OSV
added 2023/12/06 9:15 a.m.1 views

CVE-2023-49244

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.8AI score0.00443EPSS
Exploits0References2
Prion
Prion
added 2023/12/06 9:15 a.m.22 views

Design/Logic Flaw

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

5CVSS7.2AI score0.00443EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder