Lucene search
+L

330 matches found

CNVD
CNVD
added 2022/02/15 12:0 a.m.96 views

Portainer code issue vulnerability

A code issue vulnerability exists in Portainer Agent, a lightweight user management interface for managing Docker environments and Docker hosts, which stems from the product's failure to associate Portainer instances with past time. An attacker could exploit the vulnerability to cause the API...

9.8CVSS2.3AI score0.01644EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/11 6:15 a.m.34 views

CVE-2022-24961

In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days...

9.8CVSS0.01644EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 a.m.6 views

CVE-2022-24961

In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days...

9.8CVSS5.8AI score0.01644EPSS
SaveExploits0References5
Prion
Prion
added 2022/02/11 6:15 a.m.22 views

Code injection

In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days...

7.5CVSS9.3AI score0.01644EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2022/02/11 4:52 a.m.34 views

CVE-2022-24961

In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days...

9.6AI score0.01644EPSS
SaveExploits0References4
CVE
CVE
added 2022/02/11 4:52 a.m.131 views

CVE-2022-24961

Portainer Agent (before 2.11.1) contains a vulnerability where the API server can continue running even if not associated with a Portainer instance in the recent days. This issue affects the Portainer Agent and is reflected in CVSS metrics indicating a HIGH to CRITICAL impact (Network, Low attack...

9.8CVSS9.3AI score0.01644EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/02/11 4:52 a.m.24 views

CVE-2022-24961

In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days...

9.8CVSS6.8AI score0.01644EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/02/11 12:0 a.m.14 views

Portainer 代码问题漏洞

A code issue vulnerability exists in Portainer Agent, a lightweight user management interface for managing Docker environments and Docker hosts, which stems from the product's failure to associate Portainer instances with past time. An attacker could exploit the vulnerability to cause the API...

9.8CVSS5.7AI score0.01644EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/11/02 12:0 a.m.6 views

Portainer Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-87044)

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a privilege permission and access control issue vulnerability that can be exploited by an attacker to obtain sensitive information...

6.6AI score
SaveExploits0References1
CNVD
CNVD
added 2021/11/02 12:0 a.m.18 views

Portainer Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-87043)

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a privilege permission and access control issue vulnerability that can be exploited by an attacker to obtain sensitive information...

6.3AI score
SaveExploits0References1
Veracode
Veracode
added 2021/11/01 7:41 a.m.15 views

Improper Access Control

github.com/portainer/portainer is vulnerable to improper access control. An unauthorized access vulnerability allows a remote attacker to gain access to sensitive user information...

5.1AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/10/29 6:15 p.m.10 views

CVE-2021-41874

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

SaveExploits0
Prion
Prion
added 2021/10/29 6:15 p.m.31 views

Code injection

DISPUTED An unauthorized access vulnerabiitly exists in all versions of Portainer, which could let a malicious user obtain sensitive information. NOTE: Portainer has received no detail of this CVE report. There is also no response after multiple attempts of contacting the original source...

5CVSS7.5AI score
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/29 12:0 a.m.1 views

编号撤回

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a privilege permission and access control issue vulnerability that can be exploited by an attacker to obtain sensitive information...

5.6AI score
SaveExploits0References2
Cvelist
Cvelist
added 2021/10/29 12:0 a.m.17 views

CVE-2021-41874

...

7.7AI score
SaveExploits0
CVE
CVE
added 2021/10/29 12:0 a.m.63 views

CVE-2021-41874

CVE-2021-41874 is rejected/not used; this CVE entry does not represent an active vulnerability.

7.5AI score
SaveExploits0
CNNVD
CNNVD
added 2021/10/29 12:0 a.m.6 views

编号撤回

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a privilege permission and access control issue vulnerability that can be exploited by an attacker to obtain sensitive information...

5.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/10/29 12:0 a.m.3 views

PT-2021-23445 · Portainer · Portainer

Name of the Vulnerable Software and Affected Versions: Portainer affected versions not specified Description: An unauthorized access issue exists in Portainer, which could allow a malicious user to obtain sensitive information. There is no detailed information available about this issue, as the...

7.5CVSS6.7AI score
SaveExploits0References4
Veracode
Veracode
added 2021/10/19 3:58 a.m.23 views

Cross-site Scripting (XSS)

github.com/portainer/portainer is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation of input via the node input box in Custom Templates...

6.1CVSS2.3AI score0.00606EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2021/10/18 9:15 p.m.20 views

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

6.1CVSS0.00606EPSS
SaveExploits0References2
Rows per page
Query Builder