Lucene search
+L

1760 matches found

Vulnrichment
Vulnrichment
added 2025/11/06 6:36 p.m.1 views

CVE-2024-25621 containerd affected by a local privilege escalation via wide permissions on CRI directory

containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...

7.3CVSS6.4AI score0.00157EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/06 6:36 p.m.77 views

CVE-2024-25621

CVE-2024-25621 affects containerd: versions 0.1.0–1.7.28, 2.0.0-beta.0–2.0.6, 2.1.0-beta.0–2.1.4, and 2.2.0-beta.0–2.2.0-rc.1 create directories with overly broad permissions (e.g., /var/lib/containerd, /run/containerd/io.containerd.grpc.v1.cri, /run/containerd/io.containerd.sandbox.controller.v1...

7.8CVSS6.4AI score0.00157EPSS
SaveExploits1References3Affected Software1
Snyk
Snyk
added 2025/11/06 3:12 p.m.4 views

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions when initialising host directories with 711 and 755 permissions instead of 700. An attacker can gain unauthorized access to sensitive data and potentially escalate privileges by accessing...

8.5CVSS6.9AI score0.00157EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/06 3:12 p.m.6 views

EUVD-2024-22942

containerd affected by a local privilege escalation via wide permissions on CRI directory...

7.3CVSS6.2AI score0.00157EPSS
SaveExploits1References4
Snyk
Snyk
added 2025/11/06 3:12 p.m.5 views

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions when initialising host directories with 711 and 755 permissions instead of 700. An attacker can gain unauthorized access to sensitive data and potentially escalate privileges by accessing...

8.5CVSS6.9AI score0.00157EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/11/06 3:12 p.m.4 views

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions when initialising host directories with 711 and 755 permissions instead of 700. An attacker can gain unauthorized access to sensitive data and potentially escalate privileges by accessing...

8.5CVSS6.5AI score0.00157EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/11/06 3:12 p.m.4 views

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions when initialising host directories with 711 and 755 permissions instead of 700. An attacker can gain unauthorized access to sensitive data and potentially escalate privileges by accessing...

8.5CVSS6.9AI score0.00157EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/11/06 3:12 p.m.4 views

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions when initialising host directories with 711 and 755 permissions instead of 700. An attacker can gain unauthorized access to sensitive data and potentially escalate privileges by accessing...

8.5CVSS6.5AI score0.00157EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/06 3:12 p.m.3 views

GHSA-PWHC-RPQ9-4C8W containerd affected by a local privilege escalation via wide permissions on CRI directory

Impact An overly broad default permission vulnerability was found in containerd. - /var/lib/containerd was created with the permission bits 0o711, while it should be created with 0o700 - Allowed local users on the host to potentially access the metadata store and the content store -...

7.3CVSS6.5AI score0.00157EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2025/11/06 3:12 p.m.11 views

containerd affected by a local privilege escalation via wide permissions on CRI directory

Impact An overly broad default permission vulnerability was found in containerd. - /var/lib/containerd was created with the permission bits 0o711, while it should be created with 0o700 - Allowed local users on the host to potentially access the metadata store and the content store -...

7.8CVSS6.5AI score0.00157EPSS
SaveExploits1References5Affected Software2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.6 views

containerd 安全漏洞

containerd is an industry-standard container runtime open-sourced by containerd. A security vulnerability exists in containerd versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1, which originates in the directory path /var/li...

7.8CVSS5.4AI score0.00157EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.7 views

PT-2025-45403

Name of the Vulnerable Software and Affected Versions containerd versions 1.7.28 and below containerd versions 2.0.0-beta.0 through 2.0.6 containerd versions 2.1.0-beta.0 through 2.1.4 containerd versions 2.2.0-beta.0 through 2.2.0-rc.1 Description containerd, an open-source container runtime, is...

9.8CVSS5.7AI score0.0016EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.13 views

PT-2025-45348

Name of the Vulnerable Software and Affected Versions containerd versions 0.1.0 through 1.7.28 containerd versions 2.0.0-beta.0 through 2.0.6 containerd versions 2.1.0-beta.0 through 2.1.4 containerd versions 2.2.0-beta.0 through 2.2.0-rc.1 Description containerd is an open-source container runti...

7.8CVSS5.8AI score0.00157EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2025/10/28 12:0 a.m.3 views

Fedora: Security Advisory (FEDORA-2025-bacdac27c8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.4CVSS6.8AI score0.00513EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-1457

Malware in sbrugna...

6.8CVSS6.1AI score0.01608EPSS
SaveExploits2References19
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-2187

Malware in sbrugna...

7.8CVSS6.1AI score0.00518EPSS
SaveExploits0References23
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-7476

Malicious code in bioql PyPI...

6.5CVSS6.8AI score0.01022EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-0272

Malicious code in bioql PyPI...

6.3CVSS6.3AI score0.02027EPSS
SaveExploits0References21
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2022-5937

Malicious code in bioql PyPI...

5.5CVSS6AI score0.00381EPSS
SaveExploits0References18
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-0722

Malicious code in bioql PyPI...

7.8CVSS6.2AI score0.00542EPSS
SaveExploits1References20
Rows per page
Query Builder