By registering a domain for which they control the authoritative nameservers, an attacker could arrange for a compromised container (CVE-2024-29018)

github.com/docker/docker/libnetwork is a package that provides a native Go implementation for connecting containers Affected versions of this package are vulnerable to Improper Control of a Resource Through its Lifetime, allowing DNS requests from internal networks to be forwarded to an external...

Fortinet FortiWeb ] Format string vulnerability found on multiple paths (FG-IR-20-123)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-123 advisory. - A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the conten...

CVE-2024-29018 affecting package moby-engine for versions less than 25.0.3-6

CVE-2024-29018 affecting package moby-engine for versions less than 25.0.3-6. A patched version of the package is available...

CVE-2024-29018 affecting package moby-engine for versions less than 24.0.9-9

CVE-2024-29018 affecting package moby-engine for versions less than 24.0.9-9. A patched version of the package is available...

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2024-1955)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Edge Application Manager 4.5.6 addresses the security vulnerabilities listed in the CVEs below.

Summary IBM Edge Application Manager 4.5.6 addresses the security vulnerabilities listed in the CVEs below. Vulnerability Details CVEID:CVE-2024-29018 DESCRIPTION: moby could allow a remote attacker to obtain sensitive information, caused by incorrect resource transfer between spheres. By sending...

CVE-2024-29018

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature i...

AZL-36900 CVE-2024-29018 affecting package moby-engine for versions less than 25.0.3-6

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature i...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: up, trivy, zot, ctop, melange, spire-server-fips, kubescape, loki, spire-server, kaniko, buildkitd, kargo, docker-compose, tkn, conftest, cadvisor, prometheus, conftest-fips, wolfictl, aactl, grype, syft, cilium-cli, buf, cadvisor-fips, ko, dagger, crossplane...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: aactl, crossplane, spire-server, wolfictl, buildkitd, melange, syft, kargo, cilium-cli, kubescape, dagger, cadvisor, grype, ctop, up, trivy, docker-compose, conftest, buf, ko, zot, kaniko, tkn...

CVE-2024-29018

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature i...

CVE-2024-29018

CVE-2024-29018 affects the Moby-based docker/libnetwork networking stack, where internal networks can forward DNS requests to an external nameserver due to how host loopback DNS resolution is bridged for internal networks. The issue enables an attacker controlling an authoritative DNS domain to c...

CVE-2023-29018

creationtimestamp| type| source ---|---|--- 2023-04-14 22:26:04+00:00| seen| https://t.me/cibsecurity/62175...

CVE-2023-29018

The CVE-2023-29018 issue affects the OpenFeature Operator, where overly permissive access on the open-feature-operator-controller-manager can allow cluster-wide privilege escalation. Multiple sources (Red Hat, NVD, OSV, GHSA, CNVD, Veracode) describe that an attacker could leverage lax permission...

CVE-2023-29018 OpenFeature Operator vulnerable to Cluster-level Privilege Escalation

The OpenFeature Operator allows users to expose feature flags to applications. Assuming the pre-existence of a vulnerability that allows for arbitrary code execution, an attacker could leverage the lax permissions configured on open-feature-operator-controller-manager to escalate the privileges o...

CVE-2020-29018

creationtimestamp| type| source ---|---|--- 2021-01-14 18:49:40+00:00| seen| https://t.me/cibsecurity/22161...

cPanel Access Control Error Vulnerability (CNVD-2019-29018)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker can exploit the vulnerability to...