Linux Distros Unpatched Vulnerability : CVE-2014-8178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for...

Linux Distros Unpatched Vulnerability : CVE-2016-6595

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service prevention of cluster joins via a long sequence of join an...

Malicious code in jfrog-docker-desktop-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2db670bc2926b7aa07755c4117f98356231c45c33e8855fdd90de133d0e2e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2042 Malicious code in jfrog-docker-desktop-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2db670bc2926b7aa07755c4117f98356231c45c33e8855fdd90de133d0e2e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Cross-site Scripting in Humansignal Label_Studio

CVE-2025-25296 Proof of Concept POC Description This pr...

SUSE CVE-2024-57782

An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service...

The vulnerability of the dockerd software for managing SAN networks with Brocade SANnav allows a hacker to increase their privileges.

The vulnerability of the dockerd software for managing SAN networks in Brocade SANnav systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Moby

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Moby. Vulnerability Details CVEID:CVE-2024-41110 DESCRIPTION: Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine,...

AZL-57362 CVE-2025-22869 affecting package docker-buildx for versions less than 0.14.0-4

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57374 CVE-2025-22869 affecting package docker-compose for versions less than 2.27.0-4

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

Amazon Linux 2 : docker (ALASDOCKER-2025-051)

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2025-051 advisory. golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead ...

Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2025-050)

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2025-050 advisory. golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims c...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: snyk-cli, helm-push, bom, wireguard-go, kpt, certificate-transparency, glab, nri-prometheus, dockerize, kubebuilder, runc, ferretdb, flux-notification-controller, kube-state-metrics, grpcurl, vt-cli, cloudflared, regclient, kubernetes-dashboard, spqr, spark-operator,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: helm-push, bom, wireguard-go, pulumi, kpt, nri-prometheus, dockerize, kubebuilder, nri-mssql, runc, ferretdb, kube-state-metrics, grpcurl, minio, vt-cli, wazero, esbuild, regclient, kubernetes-dashboard, nri-cassandra, spark-operator, sbom-scorecard, kubeflow-katib,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: helm-push, bom, wireguard-go, pulumi, kpt, nri-prometheus, dockerize, kubebuilder, nri-mssql, runc, ferretdb, kube-state-metrics, grpcurl, minio, vt-cli, wazero, esbuild, regclient, kubernetes-dashboard, nri-cassandra, spark-operator, sbom-scorecard, kubeflow-katib,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: bom, spire-controller-manager, grpcurl, kserve, regclient, neuvector-dbgen, gobump, sonobuoy, cni-plugins, falcosidekick, opa-envoy, mkcert, kubernetes-dashboard-api, configmap-reload, gobuster, flux-source-controller, temporal-ui-server, nri-nginx, multus-cni,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, kuberay-operator, vt-cli, aws-flb-firehose, ytt, docker-credential-gcr, influx, dgraph, nri-kafka, helm-operator, hey, doppler-kubernetes-operator, kube-logging-operator, grype, fulcio-fips, temporal-ui-server-fips, thanos, timoni,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, kuberay-operator, vt-cli, aws-flb-firehose, ytt, docker-credential-gcr, influx, dgraph, nri-kafka, helm-operator, hey, doppler-kubernetes-operator, kube-logging-operator, grype, fulcio-fips, temporal-ui-server-fips, thanos, timoni,...

openSUSE Security Advisory (SUSE-SU-2024:4204-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: docker

Issue Overview: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors...