ansible-playbook-grapher (2.1.1), chainedci (>=1.5.28, <=1.5.64) +2 more potentially affected by CVE-2023-5764 via ansible-core (>=2.15.0, <=2.15.6)

ansible-core PYPI version =2.15.0, =1.5.28, =15.0.0.0rc1, =2.2.0, =2.2.1 Source cves: CVE-2023-5764 Source advisory: OSV:PYSEC-2026-1122...

ansible-playbook-grapher (2.1.1), chainedci (>=1.5.28, <=1.5.64) +3 more potentially affected by CVE-2024-9902 via ansible-core (>=2.15.0, <=2.15.9)

ansible-core PYPI version =2.15.0, =1.5.28, =15.0.0.0rc1, =2.2.0, =1.0.0, =1.2.0 Source cves: CVE-2024-9902 Source advisory: GHSA-32P4-GM2C-WMCH...

@adinsure-ops/ops-cli (>=5.3.2, <=5.4.2), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)

@azure/msal-node NPM version =2.7.0, =5.3.2, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

Deserialization Of Untrusted Data

ops-cli is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper handling of user-supplied data in the checkoutrepo function, which allows an attacker to execute arbitrary code on the victim's machine...

ansible-playbook-grapher (2.1.1), chainedci (>=1.5.28, <=1.5.64) +2 more potentially affected by CVE-2024-0690 via ansible-core (>=2.15.0, <=2.15.6)

ansible-core PYPI version =2.15.0, =1.5.28, =15.0.0.0rc1, =2.2.0, =2.2.1 Source cves: CVE-2024-0690 Source advisory: OSV:GHSA-H24R-M9QC-PVPG...

GHSA-X23Q-4J9J-9CXW Ops CLI Deserialization of Untrusted Data vulnerability

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

Ops CLI Deserialization of Untrusted Data vulnerability

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

CVE-2021-40720

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

CVE-2021-40720

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

PYSEC-2021-380

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

Deserialization of untrusted data

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

CVE-2021-40720 Ops CLI Deserialization of Untrusted Data leads to Abritrary Code Execution

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

CVE-2021-40720

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

CVE-2021-40720

Ops CLI (version 2.0.4 and earlier) is affected by a Deserialization of Untrusted Data vulnerability in the checkout_repo function that allows arbitrary code execution when processing a malicious file. This is documented across multiple sources (e.g., Veracode and OSV/GHSA entries) as a vulnerabi...

PT-2021-22946

Name of the Vulnerable Software and Affected Versions Ops CLI versions 2.0.4 and earlier Description The issue is related to Deserialization of Untrusted Data, allowing arbitrary code execution when the checkout repo function is called on a maliciously crafted file. This enables an attacker to...

CVE-2021-40720: Deserialization of Untrusted Data

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

Adobe Ops-cli code-related vulnerabilities

Adobe Ops-cli is a Cli wrapper for Terraform, Ansible, Helmfile, and Ssh for cloud automation from Adobe USA. A code issue vulnerability exists in Adobe ops-cli that stems from the product not doing valid validation of input data during deserialization. The vulnerability can be exploited to execu...

CVE-2021-40720

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessa...

APSB21-88  Security update available for Adobe ops-cli

Adobe has released an update for Adobe ops-cli. This update resolves a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...