https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T15:33:58.251190+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-10874 CVE-2018-10874 2026-10-10T15:33:58.287095+00:00

Affected: [UNKNOWN] ansible

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

 https://cve.radiocsirt.org/vuln/usn-4072-1 USN-4072-1 — ansible vulnerabilities 2026-10-10T15:33:58.287166+00:00

Affected: Ubuntu:16.04:LTS: ansible, Ubuntu:18.04:LTS: ansible

It was discovered that Ansible failed to properly handle sensitive information. A local attacker could use those vulnerabilities to extract them. (CVE-2017-7481) (CVE-2018-10855) (CVE-2018-16837) (CVE-2018-16876) (CVE-2019-10156)

It was discovered that Ansible could load configuration files from the current working directory containing crafted commands. An attacker could run arbitrary code as result. (CVE-2018-10874) (CVE-2018-10875)

It was discovered that Ansible fetch module had a path traversal vulnerability. A local attacker could copy and overwrite files outside of the specified destination. (CVE-2019-3828)