Lucene search
+L

21 matches found

EUVD
EUVD
•added 2026/06/17 6:35 p.m.•18 views

EUVD-2026-37484

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

8.1CVSS5.4AI score0.00436EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/17 1:20 p.m.•18 views

CVE-2026-39580

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

8.1CVSS0.00436EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/17 12:00 a.m.•1 views

CVE-2026-39580: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/16 8:57 p.m.•25 views

CVE-2026-39580

The CVE-2026-39580 entry covers an Unauthenticated PHP Object Injection in the WordPress theme Micdrop versions up to 1.3.1 . The affected component is the Micdrop WordPress theme; the root cause is a PHP Object Injection vulnerability in versions

8.1CVSS5.3AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/16 8:57 p.m.•43 views

CVE-2026-39580 WordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

8.1CVSS0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/16 8:57 p.m.•11 views

CVE-2026-39580 WordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

8.1CVSS5.3AI score0.00436EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•34 views

PT-2026-50108

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

8.1CVSS5.4AI score0.00436EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/04/08 12:22 p.m.•14 views

WordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Micdrop versions = 1.3.1...

5.8AI score0.00436EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/03/06 12:00 a.m.•12 views

NewStart CGSL MAIN 6.06 (SP) : docker-ce Multiple Vulnerabilities (NS-SA-2026-0011)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has docker-ce packages installed that are affected by multiple vulnerabilities: - runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary and consequently obtain host...

9.3CVSS7.1AI score0.98452EPSS
SaveExploits39References33
OSV
OSV
•added 2022/05/17 12:21 a.m.•10 views

GHSA-VFJC-2QCW-J95J Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP)

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

5.9CVSS5.9AI score0.01829EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2018/02/10 12:00 a.m.•62 views

openSUSE: Security Advisory for docker (openSUSE-SU-2018:0406-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.0245EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/02/09 12:00 a.m.•50 views

openSUSE Security Update : docker / docker-runc / containerd / etc (openSUSE-2018-152)

This update for docker, docker-runc, containerd, golang-github-docker-libnetwork fixes several issues. These security issues were fixed : - CVE-2017-16539: The DefaultLinuxSpec function in oci/defaults.go docker did not block /proc/scsi pathnames, which allowed attackers to trigger data loss when...

6.5CVSS6.3AI score0.0245EPSS
SaveExploits0References21
RedhatCVE
RedhatCVE
•added 2017/11/22 9:49 a.m.•45 views

CVE-2017-16539

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

7.5CVSS4.4AI score0.01829EPSS
SaveExploits0References1
NVD
NVD
•added 2017/11/04 5:29 p.m.•32 views

CVE-2017-16539

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

5.9CVSS5.9AI score0.01829EPSS
SaveExploits0References5
OSV
OSV
•added 2017/11/04 5:29 p.m.•27 views

CVE-2017-16539

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

5.9CVSS6.5AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2017/11/04 5:29 p.m.•8 views

CVE-2017-16539

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

5.9CVSS5.9AI score0.01829EPSS
SaveExploits0References8
Prion
Prion
•added 2017/11/04 5:29 p.m.•25 views

Design/Logic Flaw

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

4.3CVSS5.8AI score0.01829EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2017/11/04 5:29 p.m.•38 views

CVE-2017-16539

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

5.9CVSS6.7AI score0.01829EPSS
SaveExploits0References2
OSV
OSV
•added 2017/11/04 5:29 p.m.•13 views

UBUNTU-CVE-2017-16539

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

5.9CVSS6.7AI score0.01829EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2017/11/04 5:00 p.m.•79 views

CVE-2017-16539

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

5.9CVSS6.2AI score0.01829EPSS
SaveExploits0
Rows per page
Query Builder