Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 85
Reset filtersInsertion of Sensitive Information into Log File in ansible
Ansible Exposes Sensitive Information
A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller
Improper Verification of Cryptographic Signature in ansible
Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible
Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible
OS Command Injection and Improper Input Validation in ansible
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Path Traversal in Ansible
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible
Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible
Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible
Argument Injection in Ansible
Incorrect Permission Assignment for Critical Resource in Ansible
Path Traversal in Ansible
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
Path Traversal in Ansible
OS Command Injection in ansible
Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.