Lucene search
+L

617 matches found

Debian CVE
Debian CVE
added 2024/07/24 4:49 p.m.46 views

CVE-2024-41110

Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins AuthZ under specific circumstances. The base likelihood of this being...

9.9CVSS6.7AI score0.16496EPSS
Exploits0
CNNVD
CNNVD
added 2024/07/24 12:0 a.m.3 views

Docker Engine 安全漏洞

Docker Engine is a set of lightweight runtime environment and package management tools from Docker Inc. in the United States. A security vulnerability exists in Docker Engine that stems from a vulnerability that allows an attacker to bypass the authorization plugin under certain circumstances,...

9.9CVSS7.1AI score0.16496EPSS
Exploits0References14
OpenVAS
OpenVAS
added 2024/07/16 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2024-1879)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.3AI score0.0075EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/07/16 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2024-1928)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS8.8AI score0.02733EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2024/07/16 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2024-1903)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.3AI score0.0075EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/07/16 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2024-1955)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS8.8AI score0.02733EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2024/07/16 12:0 a.m.29 views

EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2024-1955)

According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various...

8.7CVSS7.3AI score0.02733EPSS
Exploits2References6
Tenable Nessus
Tenable Nessus
added 2024/07/15 12:0 a.m.29 views

EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2024-1903)

According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container...

7.5CVSS7AI score0.0075EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/07/01 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2024-1866)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00258EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/07/01 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2024-1852)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00258EPSS
Exploits0References2
OSV
OSV
added 2024/06/28 3:28 p.m.27 views

GO-2024-2500 Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

Moby Docker Engine Insufficiently restricted permissions on data directory in github.com/docker/docker...

6.3CVSS6.8AI score0.02671EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2024/06/28 12:0 a.m.32 views

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2024-1852)

According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache...

7.8CVSS7AI score0.00258EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/28 12:0 a.m.21 views

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2024-1866)

According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache...

7.8CVSS7AI score0.00258EPSS
Exploits0References2
OSV
OSV
added 2024/06/14 1:41 p.m.27 views

GO-2024-2913 Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker...

6.3CVSS6.8AI score0.0027EPSS
Exploits0References2
OSV
OSV
added 2024/06/14 1:41 p.m.39 views

GO-2024-2914 Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Moby Docker Engine is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker...

5CVSS6.3AI score0.02085EPSS
Exploits0References1
OSV
OSV
added 2024/06/10 6:39 p.m.14 views

GHSA-XMMX-7JPF-FX42 Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing

Impact In the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and index documents are ambiguous without an accompanying Content-Type HTTP header. Versions of Moby Docker Engine prior to 20.10.11 treat the Content-Type...

7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2024/06/10 6:39 p.m.15 views

Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing

Impact In the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and index documents are ambiguous without an accompanying Content-Type HTTP header. Versions of Moby Docker Engine prior to 20.10.11 treat the Content-Type...

7AI score
Exploits0References2Affected Software2
OSV
OSV
added 2024/06/10 6:38 p.m.22 views

GHSA-V994-F8VW-G7J4 `docker cp` allows unexpected chmod of host files in Moby Docker Engine

Impact A bug was found in Moby Docker Engine where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read,...

2.8CVSS6.8AI score0.0027EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2024/06/10 6:38 p.m.33 views

`docker cp` allows unexpected chmod of host files in Moby Docker Engine

Impact A bug was found in Moby Docker Engine where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read,...

6.3CVSS6.5AI score0.0027EPSS
Exploits0References8Affected Software1
SUSE CVE
SUSE CVE
added 2024/06/04 12:55 p.m.6 views

SUSE CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission changes for existing files in the host's filesystem,...

3.6CVSS5.8AI score0.0027EPSS
Exploits0References35
Rows per page
Query Builder