Lucene search
+L

3378 matches found

RedhatCVE
RedhatCVE
•added 2024/01/17 7:30 p.m.•111 views

CVE-2023-6596

An incomplete fix was shipped for the Rapid Reset CVE-2023-44487/CVE-2023-39325 vulnerability for an OpenShift Containers...

7.5CVSS7.3AI score0.99999EPSS
SaveExploits21References3
WPVulnDB
WPVulnDB
•added 2024/01/17 12:00 a.m.•47 views

popup-builder < 4.2.6 - Admin+ SSRF & File Read

Description The plugin does not validate a parameter before making a request to it, which could allow users with the administrator role to perform SSRF attack in Multisite WordPress configurations. PoC 1. Create a multi-site wordpress setup, i.e. using docker-containers, and setup a second "site"...

5.7AI score0.00812EPSS
SaveExploits2Affected Software1
Oracle linux
Oracle linux
•added 2024/01/11 12:00 a.m.•56 views

container-tools:4.0 security update

buildah 1:1.24.6-7 - rebuild for CVE-2023-29406 - Related: 2176055 cockpit-podman 46-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/46 - Related: 2061390 conmon 2:2.1.4-2 - update to https://github.com/containers/conmon/releases/tag/v2.1.4 - Related: 2176055...

7.5CVSS6.7AI score0.03487EPSS
SaveExploits1
osv_cve
osv_cve
•added 2024/01/09 10:15 p.m.•58 views

CVE-2023-6476

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node...

7.5CVSS6.6AI score0.00859EPSS
SaveExploits0References4
NVD
NVD
•added 2024/01/09 10:15 p.m.•75 views

CVE-2023-6476

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node...

7.5CVSS6.4AI score0.00859EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/01/09 9:31 p.m.•41 views

CVE-2023-6476

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node...

6.5CVSS7AI score0.00859EPSS
SaveExploits0References3
Prion
Prion
•added 2023/12/22 3:15 p.m.•30 views

Spoofing

Wasmer is a WebAssembly runtime that enables containers to run anywhere: from Desktop to the Cloud, Edge and even the browser. Wasm programs can access the filesystem outside of the sandbox. Service providers running untrusted Wasm code on Wasmer can unexpectedly expose the host filesystem. This...

5CVSS7.2AI score0.00595EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve
•added 2023/12/22 2:54 p.m.•26 views

CVE-2023-51661 Filesystem sandbox not enforced in wasmer-cli

Wasmer is a WebAssembly runtime that enables containers to run anywhere: from Desktop to the Cloud, Edge and even the browser. Wasm programs can access the filesystem outside of the sandbox. Service providers running untrusted Wasm code on Wasmer can unexpectedly expose the host filesystem. This...

8.4CVSS8.3AI score0.00595EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
•added 2023/12/20 5:31 p.m.•37 views

Security Bulletin: Information leakage vulnerability affect IBM Business Automation Workflow - CVE-2023-40691

Summary IBM Business Automation Workflow is vulnerable to an information leakage attack. Vulnerability Details CVEID:CVE-2023-40691 DESCRIPTION: IBM Business Automation Workflow may reveal sensitive information contained in application configuration to developer and administrator users. CVSS Base...

4.9CVSS5.5AI score0.00739EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/12/15 12:00 a.m.•21 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2023:4870-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4870-1 advisory. Updated to 2.2.1 jscSLE-23879 - Enhancements: CVE-2023-46737: Possible endless data attack from...

5.3CVSS6.1AI score0.0064EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2023/12/13 9:15 p.m.•11 views

CVE-2023-50439

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission, ZED! for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows...

5.3CVSS5.9AI score0.00522EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/12/13 9:15 p.m.•23 views

CVE-2023-50440

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows...

5.5CVSS5.9AI score0.00226EPSS
SaveExploits0References2
NVD
NVD
•added 2023/12/13 9:15 p.m.•38 views

CVE-2023-50439

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission, ZED! for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows...

5.3CVSS0.00522EPSS
SaveExploits0References2
NVD
NVD
•added 2023/12/13 9:15 p.m.•39 views

CVE-2023-50440

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows...

5.5CVSS0.00226EPSS
SaveExploits0References2
Prion
Prion
•added 2023/12/13 9:15 p.m.•30 views

Design/Logic Flaw

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission, ZED! for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows...

5CVSS6.9AI score0.00522EPSS
SaveExploits0References2Affected Software3
NVD
NVD
•added 2023/12/13 8:15 p.m.•41 views

CVE-2023-50444

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL fo...

7.5CVSS0.00608EPSS
SaveExploits0References2
Prion
Prion
•added 2023/12/13 8:15 p.m.•31 views

Design/Logic Flaw

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL fo...

5CVSS7.1AI score0.00608EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
•added 2023/12/13 12:00 a.m.•48 views

CVE-2023-50440

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows...

5.8AI score0.00226EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/12/13 12:00 a.m.•15 views

CVE-2023-50440

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows...

5.9AI score0.00226EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/12/13 12:00 a.m.•17 views

CVE-2023-50444

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL fo...

7.1AI score0.00608EPSS
SaveExploits0References2
Rows per page
Query Builder