15435 matches found
Malicious code in pro-rhr-container (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec0b1a38dedf4534ebb29ea3d45af93b41e050a360c99c229eaaff93be82f775 The OpenSSF Package Analysis project identified 'pro-rhr-container' @...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.4 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.4 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
The vulnerability of the Portainer container management platform, related to insufficient protection of operational data, allows a hacker to gain access to confidential information.
The vulnerability of the Portainer container management platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...
MAL-2025-5872 Malicious code in @gdcorp-commerce/cx-page-container (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7cfb33d83efc9598ba1eef7145194848746d40838198d981254b66fd6a88b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gdcorp-commerce/cx-page-container (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7cfb33d83efc9598ba1eef7145194848746d40838198d981254b66fd6a88b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.19.4 security and extras update
Red Hat OpenShift Container Platform release 4.19.4 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...
Security Bulletin: NVIDIA Container Toolkit - July 2025
NVIDIA has released a software update for NVIDIA® Container Toolkit and GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product Security...
Vulnerability Mitigation System (VMS): LLM Agent and Evaluation Framework for Autonomous Penetration Testing
As the frequency of cyber threats increases, conventional penetration testing is failing to capture the entirety of todays complex environments. To solve this problem, we propose the Vulnerability Mitigation System VMS, a novel agent based on a Large Language Model LLM capable of performing...
PT-2025-29903
Name of the Vulnerable Software and Affected Versions NVIDIA Container Toolkit affected versions not specified Description The NVIDIA Container Toolkit contains an issue in the update-ldcache hook. An attacker could potentially cause a link following by using a specially crafted container image. ...
PT-2025-29379
Name of the Vulnerable Software and Affected Versions Tanium versions affected versions not specified Trivy version 0.64.1 Description Tanium Benchmark had an issue with incorrect default permissions. Trivy version 0.64.1 was patched to address a key fix for container security. Recommendations At...
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2025-1769)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Azure Linux 3.0 Security Update: coredns (CVE-2025-47950)
The version of coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-47950 advisory. - CoreDNS is a DNS server that chains plugins. In versions prior to 1.12.2, a Denial of Service DoS...
Moderate: Red Hat Security Advisory: satellite/iop-advisor-engine-rhel9 container image available as a Technology Preview
A new satellite/iop-advisor-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. This adds the satellite/iop-advisor-engine-rhel9 image to the Red Hat container registry. To pull this container image, run the following command: podman pull...
RHSA-2025:10271 Red Hat Security Advisory: OpenShift Container Platform 4.12.78 packages and security update
Bulletin has no description...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.12.78 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.78 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
EulerOS 2.0 SP10 : containerd (EulerOS-SA-2025-1769)
According to the versions of the containerd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers...
RHEL 8 : OpenShift Container Platform 4.12.78 (RHSA-2025:10271)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:10271 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...
GHSA-PHHQ-63JG-FP7R Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points
Background The VOLUME directive in Dockerfiles, or the config.volumes field in OCI image descriptors, indicates filesystem paths "where the process is likely to write data". While these paths have special semantics in Docker, they are only hints in the OCI spec and are not treated specially by...