High
CVE-2019-10217
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 85
Reset filters
Medium
CVE-2019-10156
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Low
CVE-2019-3828
Ansible Path Traversal vulnerability
High
CVE-2016-8614
Ansible apt_key module does not properly verify key fingerprint
Critical
CVE-2016-8628
Ansible fails to properly sanitize fact variables sent from the Ansible controller
Medium
CVE-2016-8647
Improper Input Validation in ansible
Critical
CVE-2017-7481
Ansible fails to properly mark lookup-plugin results as unsafe
High
CVE-2017-2809
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An
High
CVE-2018-10855
Ansible exposes sensitive data in log files and on the terminal
Critical
CVE-2013-2233
Ansible fails to cache SSH host keys
Critical
CVE-2016-9587
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
High
CVE-2016-3096
Link Following in ansible
High
CVE-2015-3908
Ansible does not verify that the server hostname matches a domain name in certificates
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.