CVE-2023-28471

Concrete CMS previously concrete5 in versions 9.0 through 9.1.3 is vulnerable to Stored XSS via a container name...

Cross site scripting

Concrete CMS previously concrete5 in versions 9.0 through 9.1.3 is vulnerable to Stored XSS via a container name...

CVE-2023-28471

Concrete CMS previously concrete5 in versions 9.0 through 9.1.3 is vulnerable to Stored XSS via a container name...

MODX Revolution allows XSS through extended user fields

MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as a Container name or Attribute name...

DEBIAN-CVE-2014-5278

A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...

CVE-2018-20757

MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name...

Arbitrary Log Read

github.com/kubernetes/kubernetes is vulnerable to arbitrary log reads. Using a container name, attackers are able to read the pod logs...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15628)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the deactivatereplicaVTLcontainer method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands via the container name...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15629)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the activatereplicaVTLcontainer method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands via the container name...

Arbitrary Log Read

github.com/kubernetes/kubernetes is vulnerable to arbitrary log reads. Using a container name, attackers are able to read the pod logs...

The vulnerability of the software for managing clusters of virtual machines in Kubernetes and the cloud platform OpenShift allows a hacker to read arbitrary logs.

The vulnerability of the Kubernetes cluster management software and the cloud platform OpenShift is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to read arbitrary logs using the container name, while operating remotely...

Google Kubernetes Arbitrary File Read Vulnerability

Google Kubernetes is an open source Docker container cluster management system from Google, Inc. The system provides resource scheduling, deployment and operation, service discovery and scaling up and down for containerized applications. A security vulnerability exists in Google Kubernetes versio...

CVE-2015-7528

Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name...

PT-2016-1701 · Google · Kubernetes

Name of the Vulnerable Software and Affected Versions: Kubernetes versions prior to 1.2.0-alpha.5 Description: The issue allows remote attackers to read arbitrary pod logs via a container name. This is related to a lack of protection for service data in the Kubernetes cluster management tool and...