Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 184

Export CSV
CVE-2016-9587

Ansible: Compromised remote hosts can lead to running commands on the Ansible controller

Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.

CVSS 3.1 · 8.1 High EPSS 17.0% KEV · Not listed
Vendors
Ansible Redhat
Products
Ansible Ansible Openshift and 4 more
CVE-2016-8647

Ansible: in some circumstances the mysql_user module may fail to correctly change a password

An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.

CVSS 3.1 · 4.9 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Ansible Engine Rhev Manager Virtualization
CVE-2015-8011

lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.

CVSS 3.1 · 9.8 Critical EPSS 5.5% KEV · Not listed
Vendors
Debian Fedoraproject Lldpd Project and 1 more
Products
Debian Linux Fedora Lldpd and 5 more