Lucene search
+L

251 matches found

OSV
OSV
•added 2024/11/06 10:15 a.m.•11 views

AZL-52417 CVE-2024-9902 affecting package ansible for versions less than 2.17.11-1

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS5.8AI score0.00259EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/06 10:15 a.m.•12 views

UBUNTU-CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.8AI score0.00259EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2024/11/06 9:56 a.m.•37 views

CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS0.00259EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/11/06 9:56 a.m.•18 views

CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.8AI score0.00259EPSS
SaveExploits0
OSV
OSV
•added 2024/11/06 9:56 a.m.•23 views

CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.8AI score
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2024/11/06 9:56 a.m.•16 views

CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.7AI score0.00259EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2024/11/06 6:29 a.m.•16 views

CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS7AI score0.00259EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/06 12:00 a.m.•7 views

Red Hat Ansible 安全漏洞

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to distribute, manage, and program computer systems. A security vulnerability exists in Red Hat Ansible that stems from a flawed logic or insufficient security validation in the...

6.3CVSS6.9AI score0.00259EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/06 12:00 a.m.•1 views

CVE-2024-9902: Incorrect Authorization

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

6.3CVSS6.5AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/17 12:00 a.m.•8 views

PT-2024-39926

Name of the Vulnerable Software and Affected Versions Ansible affected versions not specified Description A flaw was found in Ansible's ansible-core user module, allowing an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a...

6.3CVSS6.8AI score0.00259EPSS
SaveExploits0References71
CNNVD
CNNVD
•added 2024/07/24 12:00 a.m.•12 views

Dolibarr ERP/CRM 安全漏洞

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in Dolibarr ERP/CRM versions...

5.5CVSS7.6AI score0.00679EPSS
SaveExploits0References2
OSV
OSV
•added 2023/12/06 9:15 a.m.•13 views

CVE-2023-49244

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.8AI score0.00443EPSS
SaveExploits0References2
NVD
NVD
•added 2023/12/06 9:15 a.m.•45 views

CVE-2023-49244

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS0.00443EPSS
SaveExploits0References2
Prion
Prion
•added 2023/12/06 9:15 a.m.•32 views

Design/Logic Flaw

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

5CVSS7.2AI score0.00443EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2023/12/06 8:58 a.m.•65 views

CVE-2023-49244

CVE-2023-49244 concerns a permission management vulnerability in the multi-user module of Huawei HarmonyOS. The vulnerability is described as affecting service confidentiality due to improper permission handling in the multi-user module. The primary, documented impact is confidentiality loss; no ...

7.5CVSS7.5AI score0.00443EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/12/06 8:58 a.m.•43 views

CVE-2023-49244

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

7.7AI score0.00443EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/06 12:00 a.m.•2 views

CVE-2023-49244: Undefined Security Weakness

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS7.2AI score0.00443EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/12/05 12:00 a.m.•11 views

Huawei HarmonyOS Security Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a privilege management vulnerability in the multi-user module. Successful exploitation ...

7.5CVSS7.5AI score0.00443EPSS
SaveExploits0References4
OSV
OSV
•added 2023/08/21 1:15 a.m.•14 views

CVE-2023-4444

A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vm\patient\edit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to...

9.8CVSS5.7AI score0.00674EPSS
SaveExploits0References3
OSV
OSV
•added 2023/03/27 5:15 p.m.•11 views

CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

6.1CVSS6.5AI score0.00429EPSS
SaveExploits1References1
Rows per page
Query Builder