Lucene search
+L

8837 matches found

Cvelist
Cvelist
added 2024/09/16 5:44 a.m.39 views

CVE-2024-8777 The SYSCOM Group OMFLOW - Information Leakage

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

7.5CVSS0.00543EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/09/16 5:44 a.m.27 views

CVE-2024-8777 The SYSCOM Group OMFLOW - Information Leakage

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

7.5CVSS7.1AI score0.00543EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/16 5:44 a.m.41 views

CVE-2024-8777

CVE-2024-8777 concerns OMFLOW from The SYSCOM Group, where an information leakage vulnerability could allow unauthorized remote attackers to read arbitrary system configurations. The issue may be exposed via network access with low attack complexity and no privileges required, with the impact on ...

7.5CVSS7.6AI score0.00543EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/15 12:00 a.m.17 views

PT-2024-39243 · Syscom · Omflow

Name of the Vulnerable Software and Affected Versions: OMFLOW from The SYSCOM Group affected versions not specified Description: The issue allows unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

7.5CVSS7.3AI score0.00543EPSS
SaveExploits0References12
NVD
NVD
added 2024/09/14 3:15 a.m.22 views

CVE-2024-8775

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS0.00271EPSS
SaveExploits0References8
OSV
OSV
added 2024/09/14 3:15 a.m.8 views

AZL-53180 CVE-2024-8775 affecting package ansible 2.14.18-1

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS6.8AI score0.00271EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/14 3:15 a.m.4 views

DEBIAN-CVE-2024-8775

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS6.6AI score0.00271EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/14 3:15 a.m.10 views

AZL-53163 CVE-2024-8775 affecting package ansible for versions less than 2.17.11-1

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS6.8AI score0.00271EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/14 3:15 a.m.13 views

UBUNTU-CVE-2024-8775

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS7AI score0.00271EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/09/14 2:15 a.m.34 views

CVE-2024-8775 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS0.00271EPSS
SaveExploits0References7
OSV
OSV
added 2024/09/14 2:15 a.m.26 views

CVE-2024-8775 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS6.7AI score
SaveExploits0References13
Debian CVE
Debian CVE
added 2024/09/14 2:15 a.m.28 views

CVE-2024-8775

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS6.6AI score0.00271EPSS
SaveExploits0
CVE
CVE
added 2024/09/14 2:15 a.m.186 views

CVE-2024-8775

CVE-2024-8775 (Ansible) : A flaw exposes sensitive data stored in Ansible Vault when a playbook loads vaulted variables (e.g., via include_vars) without enabling no_log, causing plaintext leakage in output/logs. This is the primary vulnerability described in the initial CVE record. The connected ...

5.5CVSS5.4AI score0.00271EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2024/09/14 2:15 a.m.16 views

CVE-2024-8775 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS5.3AI score0.00271EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2024/09/13 9:42 a.m.17 views

CVE-2024-8775

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS6.2AI score0.00271EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/09/13 12:00 a.m.13 views

South River Titan MFT和South River Titan SFTP 安全漏洞

South River Titan MFT and South River Titan SFTP are both products of South River Corporation.South River Titan MFT is a popular file transfer solution for managing and encrypting file transfers.South River Titan SFTP is a file transfer South River Titan SFTP is a solution for file transfer. A...

5CVSS6.7AI score0.00264EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/09/13 12:00 a.m.58 views

FreeBSD : Gitlab -- vulnerabilities (bcc8b21e-7122-11ef-bece-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bcc8b21e-7122-11ef-bece-2cf05da270f3 advisory. Gitlab reports: Execute environment stop actions as the owner of the stop action job Prevent...

9.9CVSS9AI score0.39982EPSS
SaveExploits1References18
Positive Technologies
Positive Technologies
added 2024/09/13 12:00 a.m.8 views

PT-2024-39241

Name of the Vulnerable Software and Affected Versions: Ansible affected versions not specified Description: A flaw was found in Ansible where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as...

7.1CVSS7.2AI score0.00271EPSS
SaveExploits0References69
NVD
NVD
added 2024/09/12 6:15 p.m.27 views

CVE-2024-41629

An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storage of credentials...

6.6CVSS0.00171EPSS
SaveExploits1References2
OSV
OSV
added 2024/09/12 6:15 p.m.5 views

CVE-2024-41629

An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storage of credentials...

5.5CVSS5.8AI score0.00171EPSS
SaveExploits1References2
Rows per page
Query Builder