Lucene search
+L

14965 matches found

vulnersOsv
vulnersOsv
•added 2025/09/17 3:30 p.m.•3 views

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-war (1.658) +2 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.658)

org.jenkins-ci.main:jenkins-core MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-war 1.658 -...

5.3CVSS6.6AI score0.00362EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/09/17 3:30 p.m.•4 views

org.jenkins-ci.main:jenkins-test-harness (1.642), org.jenkins-ci.main:jenkins-war (1.642) +6 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.642)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.642 - org.jenkins-ci.main:jenkins-war 1.642 -...

5.3CVSS6.6AI score0.00362EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/09/17 3:30 p.m.•2 views

org.jenkins-ci.main:jenkins-test-harness (1.619), org.jenkins-ci.main:jenkins-war (1.619) +4 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.619)

org.jenkins-ci.main:jenkins-core MAVEN version 1.619 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.619 - org.jenkins-ci.main:jenkins-war 1.619 -...

5.3CVSS6.6AI score0.00362EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/09/17 3:30 p.m.•6 views

com.cloudbees.plugins:build-flow-plugin (0.18), com.companyline.hall.jenkins:hall-jenkins (>=1.0, <=1.2) +35 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.509.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.plugins:build-flow-plugin 0.18 - com.companyline.hall.jenkins:hall-jenkins =1.0...

5.3CVSS6.8AI score0.04908EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/09/17 3:30 p.m.•6 views

org.jenkins-ci.main:jenkins-test-harness (1.619), org.jenkins-ci.main:jenkins-war (1.619) +4 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.619)

org.jenkins-ci.main:jenkins-core MAVEN version 1.619 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.619 - org.jenkins-ci.main:jenkins-war 1.619 -...

5.3CVSS6.8AI score0.04908EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/09/17 3:30 p.m.•6 views

org.jenkins-ci.main:jenkins-war (1.645), org.jenkins-ci.main:test (1.645) +5 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.645)

org.jenkins-ci.main:jenkins-core MAVEN version 1.645 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.645 - org.jenkins-ci.main:test 1.645 -...

5.3CVSS6.6AI score0.00362EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/09/17 3:30 p.m.•4 views

com.loadimpact:loadimpact-plugin (>=1.53, <=1.58), org.jenkins-ci.main:jenkins-test-harness (1.535) +5 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.535)

org.jenkins-ci.main:jenkins-core MAVEN version 1.535 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.loadimpact:loadimpact-plugin =1.53, =1.18, =1.1, =1.2 - org.jenkins-ci.plugins:plugin 1.535...

5.3CVSS6.8AI score0.04908EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/09/17 3:30 p.m.•3 views

org.jenkins-ci.main:jenkins-test-harness (1.619), org.jenkins-ci.main:jenkins-war (1.619) +4 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.619)

org.jenkins-ci.main:jenkins-core MAVEN version 1.619 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.619 - org.jenkins-ci.main:jenkins-war 1.619 -...

4.3CVSS6.4AI score0.00491EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/09/17 3:30 p.m.•5 views

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...

5.3CVSS6.8AI score0.04908EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/09/17 12:49 a.m.•33 views

CVE-2025-59378

In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it even after the build has ended...

5.7CVSS5.9AI score0.00142EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/17 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-4953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can...

7.4CVSS7.3AI score0.00639EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/09/16 3:32 p.m.•32 views

Podman Creates Temporary File with Insecure Permissions

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

7.4CVSS7.3AI score0.00639EPSS
SaveExploits0References18Affected Software1
Snyk
Snyk
•added 2025/09/16 3:32 p.m.•9 views

Creation of Temporary File With Insecure Permissions

Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions due to data written to RUN --mount=type=bind mounts during the podman build not being discarded. An attacker can gain unauthorized access to sensitive files by exploiting the exposure...

9.1CVSS7.4AI score0.00639EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2025/09/16 3:32 p.m.•10 views

GHSA-M68Q-4HQR-MC6F Podman Creates Temporary File with Insecure Permissions

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

7.4CVSS7.3AI score0.00639EPSS
SaveExploits0References18
NVD
NVD
•added 2025/09/16 3:15 p.m.•24 views

CVE-2025-4953

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

7.4CVSS0.00639EPSS
SaveExploits0References16
osv_debian
osv_debian
•added 2025/09/16 3:15 p.m.•18 views

DEBIAN-CVE-2025-4953

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

7.4CVSS7.3AI score0.00639EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/09/16 3:15 p.m.•26 views

AZL-68054 CVE-2025-4953 affecting package podman for versions less than 5.6.1-2

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

7.4CVSS7.3AI score0.00639EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/09/16 3:15 p.m.•23 views

UBUNTU-CVE-2025-4953

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

7.4CVSS7.3AI score0.00639EPSS
SaveExploits0References4
Mend
Mend
•added 2025/09/16 2:54 p.m.•38 views

CVE-2025-4953

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

9.1CVSS7.3AI score0.00639EPSS
SaveExploits0References19
attackerkb
attackerkb
•added 2025/09/16 2:54 p.m.•15 views

CVE-2025-4953

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...

7.4CVSS7.4AI score0.00639EPSS
SaveExploits0References17
Rows per page
Query Builder