Lucene search
K

33 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.7 views

MiracleLinux 9 : container-tools, python-podman-4.2.0-1.el9, toolbox-0.0.99.3-5.el9 (AXSA:2023-5056:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5056:01 advisory. golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension CVE-2020-28851 golang.org/x/text: Panic in...

7.5CVSS7.3AI score0.01026EPSS
Exploits12References17
Circl
Circl
added 2025/09/03 8:25 p.m.2 views

CVE-2025-20291

creationtimestamp| type| source ---|---|--- 2025-09-03 20:25:53+00:00| seen| https://gist.github.com/Darkcrai86/2f1ca2080b354dcddf53f5dd57b3a960...

6.1CVSS4.8AI score0.00033EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 3:15 a.m.14 views

CVE-2023-39476

Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit th...

9.8CVSS9.9AI score0.02148EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 2:10 a.m.7 views

CVE-2023-39476 Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit th...

9.8CVSS8.2AI score0.02148EPSS
Exploits0References1
Circl
Circl
added 2024/03/03 12:10 a.m.0 views

CVE-2024-20291

creationtimestamp| type| source ---|---|--- 2024-03-03 00:10:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6712 2024-03-04 10:58:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10085...

5.8CVSS5.7AI score0.14039EPSS
Exploits0References2
CVE
CVE
added 2024/02/28 4:16 p.m.129 views

CVE-2024-20291

Cisco Nexus 3000/9000 NX-OS (standalone mode) contain a vulnerability in ACL programming for port-channel subinterfaces. Incorrect hardware programming during port-channel member port configuration can allow an unauthenticated, remote attacker to send traffic that should be blocked by the ACL on ...

5.8CVSS5.7AI score0.14039EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/07/10 12:0 a.m.24 views

Mageia: Security Advisory (MGASA-2023-0213)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.9AI score0.33273EPSS
Exploits7References47
Mageia
Mageia
added 2023/07/07 5:54 a.m.56 views

Updated skopeo/buildah/podman packages fix security vulnerability

Information disclosure flaw was found in Buildah CVE-2021-3602 podman allows forwarding hosts ports to vm from within vm CVE-2021-4024 Allows use "../" separators in containernetworking/cni to reference binaries such as 'reboot' in network configuration CVE-2021-20206 github.com/containers/storag...

8.8CVSS7.1AI score0.33273EPSS
Exploits7References45
Tenable Nessus
Tenable Nessus
added 2022/11/22 12:0 a.m.35 views

Oracle Linux 9 : skopeo (ELSA-2022-7955)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7955 advisory. 2:1.9.2-1 - update to https://github.com/containers/skopeo/releases/tag/v1.9.2 - Related: 2061316 2:1.9.1-1 - update to...

7.5CVSS7.1AI score0.01026EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2022/11/19 12:0 a.m.34 views

AlmaLinux 9 : skopeo (ALSA-2022:7955)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7955 advisory. - A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is...

7.5CVSS7AI score0.01026EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2022/11/16 12:0 a.m.123 views

RHEL 9 : buildah (RHSA-2022:8008)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8008 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...

7.5CVSS7.3AI score0.01026EPSS
Exploits6References19
Tenable Nessus
Tenable Nessus
added 2022/11/16 12:0 a.m.51 views

RHEL 9 : skopeo (RHSA-2022:7955)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7955 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...

7.5CVSS7.1AI score0.01026EPSS
Exploits2References9
RedHat Linux
RedHat Linux
added 2022/11/15 3:6 p.m.76 views

Moderate: Red Hat Security Advisory: buildah security and bug fix update

An update for buildah is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS6.9AI score0.01026EPSS
Exploits6References10
RedHat Linux
RedHat Linux
added 2022/11/15 1:20 p.m.41 views

Moderate: Red Hat Security Advisory: podman security and bug fix update

An update for podman is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.5CVSS7AI score0.01026EPSS
Exploits7References16
AlmaLinux
AlmaLinux
added 2022/11/15 12:0 a.m.64 views

Moderate: skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: containers/storage: DoS via malicious image CVE-2021-20291 golang: math/big.Rat: may cause a panic or an unrecoverable fatal erro...

7.5CVSS7.5AI score0.01026EPSS
Exploits2References6
OSV
OSV
added 2022/11/15 12:0 a.m.35 views

ALSA-2022:7954 Moderate: podman security and bug fix update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension...

7.5CVSS9AI score0.01026EPSS
Exploits7References18
OSV
OSV
added 2022/11/15 12:0 a.m.33 views

ALSA-2022:7955 Moderate: skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: containers/storage: DoS via malicious image CVE-2021-20291 golang: math/big.Rat: may cause a panic or an unrecoverable fatal erro...

7.5CVSS7AI score0.01026EPSS
Exploits2References6
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.3 views

CVE-2022-20291

In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.9AI score0.00015EPSS
Exploits0References2
CVE
CVE
added 2022/08/11 3:19 p.m.56 views

CVE-2022-20291

CVE-2022-20291 affects Android 13 (AppOpsService) and enables a side-channel to determine whether an app is installed without query permissions, leading to local information disclosure with no user interaction. No exploit code is provided in the documents. Android 13 security notes indicate fixes...

5.5CVSS5.4AI score0.00015EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.55 views

CentOS 8 : container-tools:rhel8 (CESA-2021:4154)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4154 advisory. - containers/storage: DoS via malicious image CVE-2021-20291 - buildah: Host environment variables leaked in build container when using chroot isolatio...

7.1CVSS7.2AI score0.01026EPSS
Exploits1References3
Rows per page
Query Builder