Lucene search
+L

4926 matches found

OSV
OSV
added 2022/12/08 2:52 a.m.11 views

GSD-2022-1007985 net/smc: Fix possible leaked pernet namespace in smc_init()

net/smc: Fix possible leaked pernet namespace in smcinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/12/08 2:37 a.m.12 views

GSD-2022-1007838 net/smc: Fix possible leaked pernet namespace in smc_init()

net/smc: Fix possible leaked pernet namespace in smcinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.5 views

PT-2022-36093 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to a possible leaked pernet namespace in the smc init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

7.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2022/12/05 11:8 p.m.43 views

Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace

Capsule implements a multi-tenant and policy-based environment in a Kubernetes cluster. A ServiceAccount deployed in a Tenant Namespace, when granted with PATCH capabilities on its own Namespace, is able to edit it and remove the Owner Reference, breaking the reconciliation of the Capsule Operato...

8.8CVSS8.3AI score0.00861EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/12/05 11:8 p.m.26 views

GHSA-X45C-CVP8-Q4FM Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace

Capsule implements a multi-tenant and policy-based environment in a Kubernetes cluster. A ServiceAccount deployed in a Tenant Namespace, when granted with PATCH capabilities on its own Namespace, is able to edit it and remove the Owner Reference, breaking the reconciliation of the Capsule Operato...

8.8CVSS8.6AI score0.00861EPSS
SaveExploits0References6
Veracode
Veracode
added 2022/12/05 5:43 a.m.22 views

Privilege Escalation

github.com/clastix/capsule is vulnerable to privilege escalation. The vulnerability exists in the syncNamespaceMetadata function in namespaces.go because it can edit and remove the owner reference when granted patch capabilities on its namespace...

8.8CVSS8.3AI score0.00861EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2022/12/02 6:22 p.m.42 views

CVE-2022-46167 Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to version 0.1.3, a ServiceAccount deployed in a Tenant Namespace, when granted with PATCH capabilities on its own Namespace, is able to edit it and remove the Owner Reference, breaking the reconciliation of the Capsule...

8.8CVSS8.9AI score0.00861EPSS
SaveExploits0References4
CVE
CVE
added 2022/12/02 6:22 p.m.77 views

CVE-2022-46167

CVE-2022-46167 affects Capsule (Kubernetes multi-tenant/policy framework). Before v0.1.3, a ServiceAccount in a Tenant Namespace granted PATCH on its own Namespace can edit/delete the OwnerReference, breaking Capsule Operator reconciliation and removing Pod Security annotations, Network Policies,...

8.8CVSS8.6AI score0.00861EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/02 6:22 p.m.7 views

CVE-2022-46167 Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to version 0.1.3, a ServiceAccount deployed in a Tenant Namespace, when granted with PATCH capabilities on its own Namespace, is able to edit it and remove the Owner Reference, breaking the reconciliation of the Capsule...

8.8CVSS8.6AI score0.00861EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/12/02 12:0 a.m.18 views

PT-2022-27782 · Capsule · Capsule

Name of the Vulnerable Software and Affected Versions: Capsule versions prior to 0.1.3 Description: Capsule is a multi-tenancy and policy-based framework for Kubernetes. A ServiceAccount deployed in a Tenant Namespace, when granted with PATCH capabilities on its own Namespace, is able to edit it...

8.8CVSS7.1AI score0.00861EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2022/12/01 12:0 a.m.5 views

PT-2024-11835 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the sk user ns function, which is caused by the newly allocated skb not having sk in the unix diag get exact function. This can le...

9.1CVSS6.6AI score0.03849EPSS
SaveExploits13References1810
Oracle linux
Oracle linux
added 2022/11/22 12:0 a.m.45 views

libvirt security, bug fix, and enhancement update

8.5.0-7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 8.5.0-7 - securityselinux: Dont ignore NVMe disks when setting image label rhbz2121441 8.5.0-6 - qemuprocess: Destroy domains namespace after killing QEMU rhbz2121141 8.5.0-5 - rpc: Pass OPENSSLCONF through to ssh invocations...

4.3CVSS0.6AI score0.01049EPSS
SaveExploits0
Veracode
Veracode
added 2022/11/16 8:35 p.m.34 views

Privilege Escalation

python3.10 is vulnerable to privilege escalation. The vulnerability exists when used with the forkserver start method on Linux allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine which...

7.8CVSS7.8AI score0.0063EPSS
SaveExploits0References23Affected Software5
NVD
NVD
added 2022/11/15 1:15 a.m.29 views

CVE-2022-42120

A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' namespace attribute...

9.8CVSS0.00729EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/11/15 1:15 a.m.5 views

CVE-2022-42120

A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' namespace attribute...

9.8CVSS7.5AI score0.00729EPSS
SaveExploits0References4
Prion
Prion
added 2022/11/15 1:15 a.m.32 views

Sql injection

A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' namespace attribute...

7.5CVSS9.8AI score0.00729EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/11/15 12:0 a.m.41 views

NewStart CGSL MAIN 6.02 : docker-ce Vulnerability (NS-SA-2022-0095)

The remote NewStart CGSL host, running version MAIN 6.02, has docker-ce packages installed that are affected by a vulnerability: - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for...

6CVSS7.5AI score0.01677EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/11/15 12:0 a.m.8 views

PT-2022-26266 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.3 through 7.4.3.16 Liferay DXP versions 7.3 before update 4 Liferay DXP versions 7.4 before update 17 Description: A SQL injection issue in the Fragment module allows attackers to execute arbitrary SQL commands via...

9.8CVSS9.8AI score0.00729EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2022/11/14 12:0 a.m.34 views

AlmaLinux 8 : mingw-expat (ALSA-2022:7811)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7811 advisory. - Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990 - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks...

9.8CVSS7.4AI score0.35867EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2022/11/14 12:0 a.m.8 views

Liferay Portal和Liferay DXP SQL注入漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

9.8CVSS8.9AI score0.00729EPSS
SaveExploits0References5
Rows per page
Query Builder