Поиск уязвимостей
Количество 19
Количество 19
ALT-PU-2014-1957
ALT-PU-2014-1957: package `ansible` update to version 1.6.8-alt1
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated us ...
GHSA-4cvm-5776-jx9f
Ansible Arbitrary Code Execution
CVE-2014-4678
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657.
CVE-2014-4678
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657.
CVE-2014-4678
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657.
CVE-2014-4678
The safe_eval function in Ansible before 1.6.4 does not properly restr ...
GHSA-66c7-5pwv-mm3j
Ansible Code Injection Vulnerability
CVE-2014-4967
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailing " src=" clause, (2) a trailing " temp=" clause, or (3) a trailing " validate=" clause accompanied by a shell command.
CVE-2014-4967
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailing " src=" clause, (2) a trailing " temp=" clause, or (3) a trailing " validate=" clause accompanied by a shell command.
CVE-2014-4967
Multiple argument injection vulnerabilities in Ansible before 1.6.7 al ...
CVE-2014-4966
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code via (1) crafted lookup('pipe') calls or (2) crafted Jinja2 data.
CVE-2014-4966
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code via (1) crafted lookup('pipe') calls or (2) crafted Jinja2 data.
CVE-2014-4966
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lo ...
GHSA-wqq5-c89p-3wc3
Ansible Arbitrary Code Execution
GHSA-64cw-m57j-65xj
Ansible Arbitrary Code Execution
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2014-1957 ALT-PU-2014-1957: package `ansible` update to version 1.6.8-alt1 | CVSS3: 9.8 | больше 12 лет назад | |
 | CVE-2014-3498 The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands. | CVSS3: 8.8 | 3% Низкий | больше 9 лет назад |
 | CVE-2014-3498 The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands. | CVSS2: 3.7 | 3% Низкий | больше 12 лет назад |
 | CVE-2014-3498 The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands. | CVSS3: 8.8 | 3% Низкий | больше 9 лет назад |
| CVE-2014-3498 The user module in ansible before 1.6.6 allows remote authenticated us ... | CVSS3: 8.8 | 3% Низкий | больше 9 лет назад |
| GHSA-4cvm-5776-jx9f Ansible Arbitrary Code Execution | CVSS3: 8.8 | 3% Низкий | больше 4 лет назад |
| CVE-2014-4678 The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657. | CVSS3: 9.8 | 5% Низкий | больше 6 лет назад |
| CVE-2014-4678 The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657. | CVSS3: 9.8 | 5% Низкий | больше 6 лет назад |
| CVE-2014-4678 The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657. | CVSS3: 9.8 | 5% Низкий | больше 6 лет назад |
| CVE-2014-4678 The safe_eval function in Ansible before 1.6.4 does not properly restr ... | CVSS3: 9.8 | 5% Низкий | больше 6 лет назад |
| GHSA-66c7-5pwv-mm3j Ansible Code Injection Vulnerability | CVSS3: 9.8 | 5% Низкий | больше 4 лет назад |
| CVE-2014-4967 Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailing " src=" clause, (2) a trailing " temp=" clause, or (3) a trailing " validate=" clause accompanied by a shell command. | CVSS3: 9.8 | 4% Низкий | больше 6 лет назад |
| CVE-2014-4967 Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailing " src=" clause, (2) a trailing " temp=" clause, or (3) a trailing " validate=" clause accompanied by a shell command. | CVSS3: 9.8 | 4% Низкий | больше 6 лет назад |
| CVE-2014-4967 Multiple argument injection vulnerabilities in Ansible before 1.6.7 al ... | CVSS3: 9.8 | 4% Низкий | больше 6 лет назад |
| CVE-2014-4966 Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code via (1) crafted lookup('pipe') calls or (2) crafted Jinja2 data. | CVSS3: 9.8 | 4% Низкий | больше 6 лет назад |
| CVE-2014-4966 Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code via (1) crafted lookup('pipe') calls or (2) crafted Jinja2 data. | CVSS3: 9.8 | 4% Низкий | больше 6 лет назад |
| CVE-2014-4966 Ansible before 1.6.7 does not prevent inventory data with "{{" and "lo ... | CVSS3: 9.8 | 4% Низкий | больше 6 лет назад |
| GHSA-wqq5-c89p-3wc3 Ansible Arbitrary Code Execution | CVSS3: 9.8 | 4% Низкий | больше 4 лет назад |
| GHSA-64cw-m57j-65xj Ansible Arbitrary Code Execution | CVSS3: 9.8 | 4% Низкий | больше 4 лет назад |
Уязвимостей на страницу