CVE-2025-38369

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent proce...

CVE-2025-38369 dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent proce...

NVIDIA Container Toolkit Backlink Vulnerability

NVIDIA Container Toolkit is a container toolkit introduced by NVIDIA for directly invoking GPU resources in containers, solving the problems of complex device access and insufficient resource isolation faced by traditional containerized GPU computing. NVIDIA Container Toolkit suffers from a...

NewStart CGSL MAIN 7.02 : runc Vulnerability (NS-SA-2025-0145)

The remote NewStart CGSL host, running version MAIN 7.02, has runc packages installed that are affected by a vulnerability: - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an...

The vulnerability of the Multi-Account Container function in the Mozilla Firefox browser allows attackers to circumvent existing security restrictions of proxy servers and disclose protected information.

The vulnerability of the Multi-Account Container function in the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions of proxy servers and disclose sensitive information b...

Important: Red Hat Security Advisory: Updated 8.1 container image is now available: security and bug fix update

Updated rhceph-8.1 container image is now available in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...

CVE-2025-33013

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release...

RHSA-2025:11352 Red Hat Security Advisory: OpenShift Container Platform 4.15.55 packages and security update

Bulletin has no description...

PT-2025-31368

Name of the Vulnerable Software and Affected Versions Moby versions 28.2.0 through 28.3.2 Description Moby is an open source container framework developed by Docker Inc. When the firewalld service is reloaded, it removes all iptables rules, including those created by Docker. In affected versions,...

SUSE CVE-2025-46809

A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ? before 4.3.33-150400.3.55.2; Container suse/manager/5.0/x8664/proxy-httpd:5.0.5.7.23.1: from ? befor...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.55 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.55 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

CVE-2017-20198 DC/OS Marathon UI < 1.9.0 Unauthenticated RCE via Docker Mount Abuse

The Marathon UI in DC/OS 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem / with read/write privileges. When using a malicious Docker image,...

SUSE CVE-2025-23266

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.5 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.5 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

CVE-2025-23266 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GHSA-VMG3-7V43-9G23 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

CVE-2025-23266 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GHSA-VMG3-7V43-9G23 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

PT-2025-30419 · Telegai · Telegai

Name of the Vulnerable Software and Affected Versions: TelegAI affected versions not specified Description: The application contains a stored cross-site scripting XSS issue in its chat component and character container component. An attacker can execute arbitrary client-side scripts by creating a...

CVE-2025-51860

TelegAI (telegai.com) is affected by a Stored XSS (CVE-2025-51860) in its chat component and character container. The vulnerability allows an attacker to craft an AI Character with SVG XSS payloads in fields such as description, greeting, example dialog, or system prompt, causing arbitrary client...