Lucene search
K

4362 matches found

CVE
CVE
added 2019/04/29 2:31 p.m.52 views

CVE-2019-11595

CVE-2019-11595 concerns uBlock before 0.9.5.15, where the $rewrite filter option enables filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script via XMLHttpRequest or Fetch if the script origin has an open redirect. The Red Hat advisory confirms th...

9CVSS9.1AI score0.02407EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2019/04/29 2:31 p.m.27 views

CVE-2019-11595

In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

9.2AI score0.02407EPSS
Exploits1References2
Cvelist
Cvelist
added 2019/04/29 2:30 p.m.17 views

CVE-2019-11594

In AdBlock before 3.45.0, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

8.3AI score0.02389EPSS
Exploits0References3
CVE
CVE
added 2019/04/29 2:30 p.m.44 views

CVE-2019-11593

CVE-2019-11593 affects Adblock Plus prior to 3.5.2. The vulnerability arises from the $rewrite filter option , which can let filter-list maintainers execute arbitrary code in a client-side session when a service loads a script via XMLHttpRequest or Fetch if the script origin has an open redirect....

8.1CVSS8.2AI score0.02491EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2019/04/29 2:30 p.m.26 views

CVE-2019-11593

In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

8.3AI score0.02491EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.7 views

The vulnerability of the fetch module in the Ansible configuration management system arises from incorrect restrictions on the path to the restricted-access directory. This allows attackers to gain unauthorized access to information and compromise its integrity.

The vulnerability of the fetch module in the Ansible configuration system is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a local attacker to gain unauthorized access to information and compromise its integrity by copying a...

4.2CVSS5.8AI score0.00522EPSS
Exploits0References10Affected Software6
OSV
OSV
added 2019/04/15 4:19 p.m.34 views

GHSA-74VQ-H4Q8-X6JV Ansible Path Traversal vulnerability

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS5.3AI score0.00522EPSS
Exploits0References16
OSV
OSV
added 2019/03/27 1:29 p.m.35 views

CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.6AI score0.00522EPSS
Exploits0References9
NVD
NVD
added 2019/03/27 1:29 p.m.19 views

CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS5AI score0.00522EPSS
Exploits0References9
OSV
OSV
added 2019/03/27 1:29 p.m.3 views

ALPINE-CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.7AI score0.00522EPSS
Exploits0References1
OSV
OSV
added 2019/03/27 1:29 p.m.3 views

DEBIAN-CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.2AI score0.00522EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2019/03/27 1:29 p.m.30 views

CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.8AI score0.00522EPSS
Exploits0References3
Prion
Prion
added 2019/03/27 1:29 p.m.28 views

Path traversal

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

3.3CVSS4.2AI score0.00522EPSS
Exploits0References9Affected Software1
PyPA
PyPA
added 2019/03/27 1:29 p.m.7 views

PYSEC-2019-5

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.7AI score0.00522EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2019/03/27 1:29 p.m.33 views

PYSEC-2019-5

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS4.3AI score0.00522EPSS
Exploits0References9
OSV
OSV
added 2019/03/27 1:29 p.m.1 views

UBUNTU-CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

10CVSS6.7AI score0.00522EPSS
Exploits0References4
OSV
OSV
added 2019/03/27 1:29 p.m.18 views

PYSEC-2019-75

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.6AI score0.00522EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2019/03/27 12:0 a.m.32 views

CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.2AI score0.00522EPSS
Exploits0
Cvelist
Cvelist
added 2019/03/27 12:0 a.m.29 views

CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS4.9AI score0.00522EPSS
Exploits0References9
CVE
CVE
added 2019/03/27 12:0 a.m.296 views

CVE-2019-3828

CVE-2019-3828 affects the Ansible fetch module. The vulnerability exists in affected releases where the fetch module does not restrict absolute paths, enabling path traversal to copy or overwrite files outside the designated destination on the local Ansible controller host. Affected versions are ...

4.2CVSS4.7AI score0.00522EPSS
Exploits0References9Affected Software1
Rows per page
Query Builder