Lucene search
+L

18056 matches found

Wolfi
Wolfi
•added 2026/08/15 2:16 a.m.•34 views

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, pulumi-kubernetes-operator, ipfs-cluster, external-secrets-operator, dynamic-localpv-provisioner, karma, k8ssandra-operator, nri-nginx, malcontent, neuvector-dbgen, rancher-agent, sftpgo-plugin-eventsearch, cluster-api, sealed-secrets...

5.8AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/15 2:16 a.m.•38 views

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, pulumi-kubernetes-operator, ipfs-cluster, external-secrets-operator, dynamic-localpv-provisioner, karma, k8ssandra-operator, nri-nginx, malcontent, neuvector-dbgen, rancher-agent, sftpgo-plugin-eventsearch, cluster-api, sealed-secrets...

5.8AI score
SaveExploits0
osv_opensuse
osv_opensuse
•added 2026/08/15 12:00 a.m.•8 views

OPENSUSE-SU-2026:11520-1 kubevirt1.9-container-disk-1.9.0-1.1 on GA media

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

9.6CVSS6.2AI score0.00716EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2026/08/15 12:00 a.m.•21 views

PT-2026-76446

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

9.6CVSS6.4AI score0.00716EPSS
SaveExploits0References11
osv_opensuse
osv_opensuse
•added 2026/08/15 12:00 a.m.•9 views

OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

9.6CVSS6.2AI score0.00787EPSS
SaveExploits1References12
Chainguard
Chainguard
•added 2026/08/14 8:25 p.m.•57 views

GHSA-QV9R-C865-CP47 vulnerabilities

Vulnerabilities for packages: nacos-docker, apache-jena-fuseki, airbyte-server-fips, pinot-fips, sonarqube, wildfly, nacos, strimzi-kafka-operator, pinot, kafka-fips, zaproxy, traccar, apache-tika-fips, apache-hop, apache-activemq, cruise-control-fips, hono, apache-tika, druid, flink, kafka,...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:25 p.m.•59 views

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-evidently-fips, aws-load-balancer-controller-fips, trufflehog-fips, cosmo-router-fips, jupyterhub-k8s-image-awaiter-fips, trivy-k8s-wrapper-fips, crossplane-provider-aws-applicationinsights-fips, prometheus-process-exporter-fips,...

5.9CVSS6.2AI score0.0055EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/08/14 8:25 p.m.•79 views

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: kapp-controller, crossplane-provider-aws-evidently-fips, crossplane-provider-aws-rolesanywhere-fips, crossplane-provider-aws-workspaces, crossplane-provider-aws-datasync-fips, kubeflow-pipelines, rke2-cloud-provider-fips, aws-load-balancer-controller-fips,...

5.8AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:24 p.m.•35 views

CVE-2026-54526 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

9.9CVSS5.6AI score0.00553EPSS
SaveExploits1
Wolfi
Wolfi
•added 2026/08/14 8:24 p.m.•38 views

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: falco-no-driver, renovate, cilium, zot, k8s-device-plugin, cert-manager, containerd, nerdctl, helm, kots, kyverno, snyk-cli, k3s, trino, aactl, spire-server, k3d...

7.5CVSS5.6AI score0.00298EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:24 p.m.•33 views

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: falco-no-driver, renovate, cilium, zot, k8s-device-plugin, cert-manager, containerd, nerdctl, helm, kots, kyverno, snyk-cli, k3s, trino, aactl, spire-server, k3d...

8.4CVSS5.6AI score0.00129EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:24 p.m.•32 views

CVE-2026-73569 vulnerabilities

Vulnerabilities for packages: tileserver-gl, jitsucom-jitsu...

8.7CVSS5.8AI score0.00507EPSS
SaveExploits0
osv_azl
osv_azl
•added 2026/08/14 5:18 p.m.•28 views

AZL-95985 CVE-2026-47766 affecting package crun 1.24-6

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

5.1CVSS5.8AI score0.00196EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/14 5:18 p.m.•19 views

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

5.1CVSS0.00196EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/14 4:16 p.m.•19 views

EUVD-2026-58714

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

5.1CVSS5.8AI score0.00196EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/14 4:16 p.m.•31 views

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

5.8AI score0.00196EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/08/14 4:16 p.m.•62 views

CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

5.1CVSS0.00196EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/14 4:16 p.m.•61 views

CVE-2026-47766

CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...

5.1CVSS5.8AI score0.00196EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/08/14 4:16 p.m.•24 views

CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

5.1CVSS5.8AI score
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/08/14 4:16 p.m.•30 views

CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

5.1CVSS5.8AI score0.00196EPSS
SaveExploits0
Rows per page
Query Builder