Lucene search
K

13 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в containerd-app

Containerd is an open-source container runtime. A bug was discovered in Containerd prior to versions 1.6.38, 1.7.27, and 2.0.4. In these versions, containers launched with a User set as UID:GID that exceeded the maximum 32-bit signed integer could cause an overflow condition, resulting in the...

7.8CVSS5.8AI score0.00064EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-40635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User...

7.8CVSS6.3AI score0.00064EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/04/29 12:0 a.m.11 views

Amazon Linux 2 : containerd (ALASECS-2025-056)

The version of containerd installed on the remote host is prior to 1.7.27-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-056 advisory. containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 whe...

7.8CVSS6.4AI score0.00064EPSS
Exploits1References4
OSV
OSV
added 2025/03/29 6:24 a.m.1 views

OESA-2025-1350 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

7.8CVSS7.1AI score0.00064EPSS
Exploits1References2
OSV
OSV
added 2025/03/29 6:24 a.m.1 views

OESA-2025-1348 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

7.8CVSS7.1AI score0.00064EPSS
Exploits1References2
OSV
OSV
added 2025/03/21 1:19 p.m.1 views

OESA-2025-1325 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

7.8CVSS7.1AI score0.00064EPSS
Exploits1References2
OSV
OSV
added 2025/03/21 1:19 p.m.2 views

OESA-2025-1324 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

7.8CVSS7.1AI score0.00064EPSS
Exploits1References2
OSV
OSV
added 2025/03/17 10:15 p.m.0 views

AZL-58845 CVE-2024-40635 affecting package containerd for versions less than 1.7.13-8

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...

7.8CVSS7.1AI score0.00064EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/03/17 12:0 a.m.0 views

containerd 输入验证错误漏洞

containerd is an industry standard container runtime from containerd open source. An input validation error vulnerability exists in containerd versions prior to 1.6.38, prior to 1.7.27, and prior to 2.0.4, which stems from an overflow that can be caused when UID:GID exceeds the maximum 32-bit...

7.8CVSS6.5AI score0.00064EPSS
Exploits1References2
Patchstack
Patchstack
added 2024/06/07 12:0 a.m.10 views

WordPress One Page Express Companion Plugin <= 1.6.37 is vulnerable to Cross Site Scripting (XSS)

Software One Page Express Companion Type Plugin Vulnerable versions = 1.6.37 Fixed in 1.6.38 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4703 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 44d8656d9c4b Credits stealthcopt...

6.4CVSS5.8AI score0.00405EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/03/06 11:15 p.m.20 views

CVE-2022-3857

A flaw was found in libpng 1.6.38. A crafted PNG image can lead to a segmentation fault and denial of service in pngsetuppaethrow function...

5.6AI score
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/03/06 11:15 p.m.35 views

CVE-2022-3857

Rejected reason: Maintainer contacted. This is a false-positive. The flaw does not actually exist and was erroneously tested...

6.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/06 12:0 a.m.1 views

PT-2023-13618 · Libpng · Libpng

Name of the Vulnerable Software and Affected Versions: libpng version 1.6.38 Description: A flaw was found in libpng. A crafted PNG image can lead to a segmentation fault and denial of service in the png setup paeth row function. Recommendations: For libpng version 1.6.38, consider updating to a...

5.5CVSS8.9AI score
Exploits0References6
Rows per page
Query Builder