Skip to contentRedhat Ansible vulnerabilities
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad...CVE-2018-14681Fix available8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank...CVE-2018-14680Fix available6.5 Medium
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...CVE-2018-14679Fix available6.5 Medium
- red hat ansible tower, redhat cloudforms +1 moreA flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a...CVE-2017-121488.4 High
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePoppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory...CVE-2018-13988Fix available6.5 Medium
- [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 moreAnsible Arbitrary Code ExecutionCVE-2018-10875Fix available7.8 High
- [unknown] ansible, redhat ansible engine, openstack +2 more +4 moreAnsible Improper Input Validation vulnerabilityCVE-2018-10874Fix available7.8 High
- [unknown] ansible, canonical ubuntu linux, debian linux +4 more +6 moreAnsible exposes sensitive data in log files and on the terminalCVE-2018-10855Fix available5.9 Medium
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 moreThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...CVE-2018-12910Fix available9.8 Critical
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...CVE-2018-0495Fix available4.7 Medium
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1061Fix available6.5 Medium
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1060Fix available4.3 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...CVE-2017-18267Fix available5.5 Medium
- gnome libgxps, redhat ansible tower, enterprise linux desktop +2 more +4 moreThere is a stack-based buffer over-read in calling GLib in the function...CVE-2018-10767Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...CVE-2018-10768Fix available6.5 Medium
- redhat ansibleAnsible fails to cache SSH host keysCVE-2013-2233Fix available7.4 High
- gnome libgxps, opensuse leap, redhat ansible tower +3 more +5 moreThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...CVE-2018-10733Fix available6.5 Medium
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower through version 3.2.3 has a vulnerability that allows users only with access to...CVE-2018-11048.8 High
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower before version 3.2.4 has a flaw in the management of system and organization...CVE-2018-11017.2 High
- paramiko, debian linux, redhat ansible engine +8 more +10 moreParamiko not properly checking authentication before processing other requestsCVE-2018-7750Public exploitFix availableEPSS 27.1%9.8 Critical
- [unknown] ansible, redhat openstack +1 moreAnsible Arbitrary Code ExecutionCVE-2017-7466Fix available8.0 High
- ansible, redhat openstack +1 moreAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systemsCVE-2016-9587Public exploitFix availableEPSS 17.0%6.6 Medium
- red hat ansibleAnsible fails to properly sanitize fact variables sent from the Ansible controllerCVE-2016-8628Fix available7.6 High
- red hat ansible, redhat enterprise linux server +1 moreAnsible Insertion of Sensitive Information into Log File vulnerabilityCVE-2017-7550Fix available9.8 Critical
- [unknown] ansible, canonical ubuntu linux, debian linux +7 more +9 moreAnsible fails to properly mark lookup-plugin results as unsafeCVE-2017-7481Fix available5.3 Medium
- red hat ansible, redhat ansible engine, virtualization +2 moreImproper Input Validation in ansibleCVE-2016-8647Fix available2.2 Low
- red hat ansibleAnsible apt_key module does not properly verify key fingerprintCVE-2016-8614Fix available6.3 Medium
- redhat ansibleAnsible Arbitrary Code ExecutionCVE-2014-3498Fix available8.8 High
- redhat ansibleAnsible Sandbox Escape via Symlink AttackCVE-2015-6240Fix available7.8 High
- redhat ansible, fedoraproject fedora +1 moreLink Following in ansibleCVE-2016-3096Fix available7.8 High
- redhat ansibleAnsible does not verify that the server hostname matches a domain name in certificatesCVE-2015-3908Fix available4.3 Medium
- redhat ansibleAnsible Arbitrary Code ExecutionCVE-2014-4967Fix available9.8 Critical
- redhat ansibleAnsible Arbitrary Code ExecutionCVE-2014-4966Fix available9.8 Critical
- red hat ansible, debian linux +1 moreAnsible Code Injection VulnerabilityCVE-2014-4678Fix available9.8 Critical
- redhat ansibleAnsible Arbitrary File Overwrite VulnerabilityCVE-2013-4260Fix available3.3 Low
- redhat ansibleAnsible uses a socket with predictable filename in /tmpCVE-2013-4259Fix available1.9 Low