4 matches found
PYSEC-2020-200
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file...
5.5CVSS3.1AI score0.00418EPSS
SaveExploits0References3
Directory traversal
Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the src parameter...
5CVSS7.2AI score0.03736EPSS
SaveExploits2References7Affected Software1
20