119 matches found
CVE-2026-42801
A flaw was found in ASR Crane and Falcon. This vulnerability, located in the asrrc module on Linux, is a NULL pointer dereference. An attacker could potentially exploit this to manipulate pointers, which may lead to unpredictable system behavior or a denial of service. Mitigation Mitigation for...
go-pillage-registries
go-pillage-registries Este proyecto toma un registro Docker y saquea el manifiesto y la configuración de cada imagen en su catálogo. Utiliza el paquete del comando crane de Google, que debería seguir la semántica de keychain de Docker. Si desea anular esto, simplemente cambie authn.DefaultKeychai...
CVE-2026-42801
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
EUVD-2026-85171
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
CVE-2026-42801 Deference after null check in as_rrc
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
CVE-2026-42801 Deference after null check in as_rrc
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
CVE-2026-42801
A NULL pointer dereference vulnerability exists in the as_rrc module of ASR Crane, Falcon on Linux . The flaw is located in the program file 3g.mod/lib/src/urrsir.c and can lead to Pointer Manipulation . The vulnerability has a HIGH base severity score of 7.4. No specific exploit information or r...
CVE-2026-42801: NULL Pointer Dereference
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
GO-2026-4946 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, omnibump, kubernetes-csi-livenessprobe, cloudnative-pg, docker-cli-buildx, logstash-exporter, kuberay-operator, pvc-autoresizer, temporal-ui-server, atlantis, opencost, fscrypt, dbmate, hugo-extended, hubble, mods,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: amazon-ecs-cni-plugins-fips, syncthing-fips, flux, fuse-overlayfs-snapshotter, commercial-grafana, gitness, commercial-chainloop-cli, rke2-runtime, terraform-fips, gitleaks, malcontent, cloud-provider-azure-fips, tekton-chains-fips, juicefs, cloud-provider-aws-fips,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: amazon-ecs-cni-plugins-fips, syncthing-fips, flux, fuse-overlayfs-snapshotter, commercial-grafana, gitness, commercial-chainloop-cli, rke2-runtime, terraform-fips, gitleaks, malcontent, cloud-provider-azure-fips, tekton-chains-fips, juicefs, cloud-provider-aws-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: amazon-ecs-cni-plugins-fips, syncthing-fips, timestamp-authority, crossplane-provider-aws-cloudwatchlogs-fips, aws-nuke-fips, cilium-certgen-fips, nri-nginx-fips, aws-application-networking-k8s-fips, apisix-ingress-controller, flux, fuse-overlayfs-snapshotter,...
CVE-2024-34679
Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...
EUVD-2025-117227
Malicious code in minor-fuchsia-crane npm...
MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in juicy_crane_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b7680011fb13a9be52884b44764bc62e5c0373cbc7e9591336ccd7f18367eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-102083
Malicious code in standardcranez3n npm...
EUVD-2025-98677
Malicious code in generalcranez3n npm...