14846 matches found
Ubuntu Pro Realtime 22.04 LTS : Linux kernel (Intel IoTG Real-time) vulnerabilities (USN-8164-1)
The remote Ubuntu Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8164-1 advisory. Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker coul...
Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-8163-1)
"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8163-1 advisory. Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these...
MAL-2026-2613 Malicious code in upstart-offer-container (npm)
Package collects sensitive data SSH keys, AWS creds, env vars, exfiltrates it to a remote server, and executes shell commands. MALWARE! --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148e48dd7b06a250063027a17895962000ca784a3fe52b704bea049afc85763a The package...
Malicious code in upstart-offer-container (npm)
Package collects sensitive data SSH keys, AWS creds, env vars, exfiltrates it to a remote server, and executes shell commands. MALWARE! --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148e48dd7b06a250063027a17895962000ca784a3fe52b704bea049afc85763a The package...
Exploit for Out-of-bounds Read in Linux Linux_Kernel
CVE-2026-31413: One Byte in the BPF Verifier to Container Esca...
Exploit for CVE-2026-31413
CVE-2026-31413: One Byte in the BPF Verifier to Container Esca...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: coredns, gitlab-kas, kubernetes-csi-node-driver-registrar, ingress-nginx-controller, cert-manager, k3s, gitlab-pages, gitaly, kubernetes, k8s-device-plugin, falco-no-driver, nerdctl, redka, karpenter, argo-cd, cilium-cli, kubernetes-dashboard, hubble,...
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: beats, etcd, aws-load-balancer-controller-fips, libnvidia-container, jaeger-fips, k8s-device-plugin, argo-workflows-fips, fscrypt, gitlab-rails-ce-fips, cluster-autoscaler-fips, nemo, flux-source-watcher, gitlab-workhorse-ce-fips, kyverno, elastic-agent-fips, zot,...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: beats, etcd, aws-load-balancer-controller-fips, libnvidia-container, jaeger-fips, k8s-device-plugin, argo-workflows-fips, fscrypt, gitlab-rails-ce-fips, cluster-autoscaler-fips, nemo, flux-source-watcher, gitlab-workhorse-ce-fips, kyverno, elastic-agent-fips, zot,...
CVE-2026-32289 vulnerabilities
Vulnerabilities for packages: falco-exporter-fips, flannel-fips, grafana-beyla, grafana-agent-operator, cloud-sql-proxy, kubevela-fips, vault-benchmark, thanos-receive-controller, grafana-rollout-operator, crossplane-function-environment-configs, go-discover, sftpgo, kube-state-metrics,...
GHSA-M4PR-4J3G-9V7V vulnerabilities
Vulnerabilities for packages: sbom-convert, falco-exporter-fips, flannel-fips, grafana-beyla, nova-fips, s5cmd, grafana-agent-operator, pushprox, cloud-sql-proxy, kubevela-fips, aws-network-policy-agent-fips, custom-pod-autoscaler-operator-fips, timestamp-authority-fips, vault-benchmark,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: falco-exporter-fips, nova-fips, cloud-sql-proxy, timestamp-authority-fips, vault-benchmark, thanos-receive-controller, grafana-rollout-operator, whereabouts-fips, cilium-envoy-fips, prometheus-podman-exporter-fips, verticadb-operator, k6-operator, hello-world-golang,...
SUSE CVE-2026-34178
In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from backup/container/backup.yaml, a separate file in the same archive that is never checked against project restrictions. An...
SUSE CVE-2026-34179
In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests to /1.0/certificates/fingerprint for restricted TLS certificate users, allowing a remote authenticated attacker to escalate...
EUVD-2026-20872
LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf...
Improper Validation of Consistency within Input
Overview Affected versions of this package are vulnerable to Improper Validation of Consistency within Input through the internalImportFromBackup process in lxd/apiinternal.go. An attacker can create a backup archive with a benign backup/index.yaml and a malicious backup/container/backup.yaml, th...
GHSA-Q96J-3FMM-7FV4 LXD: Importing a crafted backup leads to project restriction bypass
Summary LXD instance backup import validates project restrictions against backup/index.yaml embedded in the tar archive, but creates the actual instance from backup/container/backup.yaml extracted to the storage volume. Because these are separate, independently attacker-controlled files within th...
LXD: Importing a crafted backup leads to project restriction bypass
Summary LXD instance backup import validates project restrictions against backup/index.yaml embedded in the tar archive, but creates the actual instance from backup/container/backup.yaml extracted to the storage volume. Because these are separate, independently attacker-controlled files within th...
Beszel has an IDOR in hub API endpoints that read system ID from URL parameter
Summary Some API endpoints in the Beszel hub accept a user-supplied system ID and proceed without further checks that the user should have access to that system. As a result, any authenticated user can access these routes for any system if they know the system's ID. System IDs are random 15...