MAL-2024-6897 Malicious code in fluent-plugin-container-logs_filter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fluent-plugin-container-logs_filter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2785 Malicious code in office-fluid-container (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in office-fluid-container (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in catalog-container (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1957 Malicious code in catalog-container (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aws-ecs-devops-using-aws-cdk (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 275. Vulnerability Details CVEID:CVE-2023-3978 DESCRIPTION: Golang html package is vulnerable to cross-site scripting, caused by improper validation of user-supplied input...

PT-2024-37451 · Hewlett Packard · Hpe Athonet Mobile Core

Name of the Vulnerable Software and Affected Versions: HPE Athonet Mobile Core software affected versions not specified Description: A security issue has been identified in the core application of HPE Athonet Mobile Core software, where a code injection vulnerability allows a threat actor to...

The vulnerability of the Windows Container Manager service on Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the Windows Container Manager service in Windows operating systems is related to incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...

[SECURITY] Fedora 40 Update: tomcat-9.0.89-1.fc40

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

CVE-2020-27352

When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...

DEBIAN-CVE-2020-27352

When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...

Moderate: Red Hat Security Advisory: Release of OpenShift Serverless 1.33.0 security update & enhancements

Red Hat OpenShift Serverless version 1.33.0 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

OPENSUSE-SU-2024:14058-1 kubevirt-container-disk-1.2.2-2.1 on GA media

These are all security issues fixed in the kubevirt-container-disk-1.2.2-2.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the JumpServer security audit system for operation and maintenance, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the JumpServer security audit system for operation and maintenance is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the Celery container...

RHEL 8 / 9 : OpenShift Container Platform 4.14.30 (RHSA-2024:3918)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3918 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

AlmaLinux 8 : container-tools:rhel8 bug fix and enhancement update (Medium) (ALSA-2024:3968)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:3968 advisory. podman: jose-go: improper handling of highly compressed data CVE-2024-28180 buildah: jose-go: improper handling of highly compressed data CVE-2024-28180...

Oracle Linux 8 : container-tools:ol8 (ELSA-2024-3968)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3968 advisory. aardvark-dns 2:1.10.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 2:1.9.0-1 - update to...

K000140043: runc vulnerability CVE-2024-21626

Security Advisory Description runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process from runc exec to have a working directo...