Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 85
Wyczyść filtryansible-core: Argument injection in ansible-galaxy role install leads to arbitrary code execution
Ansible Community General Collection is vulnerable to exposure of sensitive information
Ansible-Core vulnerable to content protections bypass
ansible-core Incorrect Authorization vulnerability
Ansible vulnerable to Insertion of Sensitive Information into Log File
ansibleguy-webui Cross-site Scripting vulnerability
Ansible symlink attack vulnerability
Ansible template injection vulnerability
Ansible galaxy-importer Path Traversal vulnerability
Ansible may expose private key
tripleo-ansible may disclose important configuration details from an OpenStack deployment
tripleo-ansible may disclose important configuration details from an OpenStack deployment
Ansible leaks password to logs
Plaintext storage of tokens in pulp_ansible
Insertion of Sensitive Information into Log File in ansible
A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. Thi
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. It was discovered that information is still included in the out
ansible-runner vulnerable to shell command injection
ansible-runner vulnerable to Race Condition
ansible-runner has default temporary files written to world R/W locations
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability ex
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.