Lucene search
+L

7 matches found

NVD
NVD
added 2026/07/22 12:17 p.m.9 views

CVE-2026-16544

A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumeraccess function jobevents, workflowevents, adhoccommandevents. Three event groups - inventoryupdateevents, projectupdateevents, and systemjobevents — are n...

6.5CVSS0.00347EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/22 11:15 a.m.12 views

CVE-2026-16544

AWX security issue: the websocket event consumer omits RBAC checks for inventory_update_events, project_update_events, and system_job_events, allowing any authenticated user to subscribe to these unmapped groups and view real-time stdout from jobs in other organizations. Affected component is the...

6.5CVSS5.5AI score0.00347EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/22 11:15 a.m.8 views

EUVD-2026-47629

A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumeraccess function jobevents, workflowevents, adhoccommandevents. Three event groups - inventoryupdateevents, projectupdateevents, and systemjobevents — are n...

6.5CVSS5.4AI score0.00347EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/22 11:15 a.m.10 views

CVE-2026-16544

A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumeraccess function jobevents, workflowevents, adhoccommandevents. Three event groups - inventoryupdateevents, projectupdateevents, and systemjobevents — are n...

6.5CVSS5.5AI score0.00347EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.46 views

PT-2026-63337

A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumer access function job events, workflow events, ad hoc command events. Three event groups - inventory update events, project update events, and system job...

6.5CVSS5.4AI score0.00347EPSS
SaveExploits0References3
OSV
OSV
added 2022/03/04 1:15 p.m.5 views

CVE-2021-44321

Mini-Inventory-and-Sales-Management-System is affected by Cross Site Request Forgery CSRF, where an attacker can update/delete items in the inventory. The attacker must be logged into the application create a malicious file for updating the inventory details and items...

5CVSS5.9AI score0.00315EPSS
SaveExploits1References2
Citrix
Citrix
added 2017/04/18 12:0 a.m.13 views

Error: "Personal vDisk Inventory Is Not Up To Date. Update the Inventory in the Master Image, And Then Try Again" In Studio

New deployed target device shows "Personal vDisk inventory is not up to date. Update the inventory in the master image, and then try again." in studio...

7AI score
SaveExploits0
Rows per page
Query Builder