<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-05T13:25:57.843358+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2019-02880</id>
    <title>bdu:2019-02880</title>
    <updated>2026-10-05T13:25:57.932245+00:00</updated>
    <content>bdu:2019-02880</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2019-02880"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-10874</id>
    <title>BREW-ansible-CVE-2018-10874</title>
    <updated>2026-10-05T13:25:57.932284+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Homebrew: ansible</p>
<p>In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-10874"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2018-12548</id>
    <title>cnvd-2018-12548</title>
    <updated>2026-10-05T13:25:57.932317+00:00</updated>
    <content>cnvd-2018-12548</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2018-12548"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-64832</id>
    <title>EUVD-2026-64832</title>
    <updated>2026-10-05T13:25:57.932331+00:00</updated>
    <content>EUVD-2026-64832</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-64832"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2018-10874</id>
    <title>fkie_cve-2018-10874</title>
    <updated>2026-10-05T13:25:57.932342+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2018-10874"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-3xvg-x47j-x75w</id>
    <title>GHSA-3xvg-x47j-x75w — Ansible Improper Input Validation vulnerability</title>
    <updated>2026-10-05T13:25:57.932362+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: ansible</p>
<p>In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-3xvg-x47j-x75w"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2018-10874</id>
    <title>gsd-2018-10874</title>
    <updated>2026-10-05T13:25:57.932384+00:00</updated>
    <content>gsd-2018-10874</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2018-10874"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/pysec-2018-81</id>
    <title>PYSEC-2018-81</title>
    <updated>2026-10-05T13:25:57.932395+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: ansible</p>
<p>In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/pysec-2018-81"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhba-2018:3788</id>
    <title>RHBA-2018:3788 — Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 12 Bug Fix and Enhancement Advisory</title>
    <updated>2026-10-05T13:25:57.932412+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>ansible: Failed tasks do not honour no_log option allowing for secrets to be disclosed in logs ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution ansible: ansible.cfg is being read from current working directory allowing possible code execution</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhba-2018:3788"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2018:4130-1</id>
    <title>SUSE-SU-2018:4130-1 — Security update for ansible</title>
    <updated>2026-10-05T13:25:57.932434+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for ansible</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2018:4130-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10874</id>
    <title>UBUNTU-CVE-2018-10874</title>
    <updated>2026-10-05T13:25:57.932449+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:18.04:LTS: ansible</p>
<p>In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10874"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0959</id>
    <title>WID-SEC-W-2024-0959 — Ansible: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode</title>
    <updated>2026-10-05T13:25:57.932475+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Ansible ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0959"/>
  </entry>
</feed>
