AZL-58867 CVE-2024-40635 affecting package containerd2 for versions less than 2.0.0-8

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...

AZL-60893 CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-9

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...

UBUNTU-CVE-2024-40635

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...

CVE-2024-40635 containerd has an integer overflow in User ID handling

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...

CVE-2024-40635 containerd has an integer overflow in User ID handling

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...

GHSA-265R-HFXG-FHMG containerd has an integer overflow in User ID handling

Impact A bug was found in containerd where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root UID 0. This could cause unexpected behavior for environments that require container...

containerd has an integer overflow in User ID handling

Impact A bug was found in containerd where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root UID 0. This could cause unexpected behavior for environments that require container...

CVE-2025-2202

CVE-2025-2202 is a broken access control vulnerability in the Innovación y Cualificación local administration plugin’s ajax.php. Affected component: local administration plugin (ajax.php). Root cause: improper access control that permits an attacker to obtain sensitive user data (id, name, login,...

Agate 跨站脚本漏洞

Agate is an Open Source Software for Epidemiology open source a user ID provider for OBiBa. A cross-site scripting vulnerability exists in Agate versions prior to 3.3.0 that stems from HTML injection and could lead to phishing attacks...

containerd 输入验证错误漏洞

containerd is an industry standard container runtime from containerd open source. An input validation error vulnerability exists in containerd versions prior to 1.6.38, prior to 1.7.27, and prior to 2.0.4, which stems from an overflow that can be caused when UID:GID exceeds the maximum 32-bit...

CVE-2025-2321

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the argument chatUserID leads to business logic errors. The attack may be...

CVE-2024-53307

creationtimestamp| type| source ---|---|--- 2025-03-10 17:38:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7026 2025-03-10 20:43:08+00:00| seen| https://t.me/cvedetector/19978...

U.S. Dept Of Defense: Information Disclosure in API Endpoint /users

An endpoint /users was exposing sensitive user information, including id, first name, last name, email, role, and authdata, to unauthenticated users. This allowed anyone to retrieve private user details without authentication...

SUSE CVE-2020-5209

In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line...

CVE-2025-2089

A vulnerability has been found in StarSea99 starsea-mall 1.0/2.X and classified as critical. Affected by this vulnerability is the function updateUserInfo of the file /personal/updateInfo of the component com.siro.mall.controller.mall.UserController. The manipulation of the argument userId leads ...

CVE-2025-2089

CVE-2025-2089 affects StarSea99 starsea-mall 1.0/2.X. The vulnerable function is updateUserInfo (file /personal/updateInfo) in the component com.siro.mall.controller.mall.UserController . Manipulating the argument userId leads to improper access controls; attack can be launched remotely and explo...

starsea-mall 安全漏洞

starsea-mall is a springboot +thymeleaf based Xiaomi mall management system by StarSea99 individual developer. A security vulnerability exists in starsea-mall version 1.0, which stems from improper manipulation of the userId parameter, which may lead to improper access control...

CVE-2025-25949

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update...

CVE-2025-25949

CVE-2025-25949 affects the Serosoft Solutions Academia Student Information System (SIS) EagleR, v1.0.118. The vulnerability is a stored cross-site scripting (XSS) flaw in the web interface, reported to occur via unsanitized input in the User ID parameter (noted also as related fields in variants ...

CVE-2025-25949

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update...