Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-22150

Malicious code in bioql PyPI...

8.8CVSS7.4AI score0.0405EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.2 views

SUSE SLES12 Security Update : docker (SUSE-SU-2025:02913-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02913-1 advisory. - Update to Docker 28.3.3-ce. - CVE-2025-54388: Fixed a bug where firewalld when reloaded can make published container ports accessible from remote...

5.1CVSS6.1AI score0.00033EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2025/08/20 12:0 a.m.2 views

SUSE: Security Advisory (SUSE-SU-2025:02913-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS6.5AI score0.00033EPSS
Exploits0References5
SUSE Linux
SUSE Linux
added 2025/08/19 12:52 p.m.2 views

Security update for docker

This update for docker fixes the following issues: Update to Docker 28.3.3-ce. CVE-2025-54388: Fixed a bug where firewalld when reloaded can make published container ports accessible from remote hosts. bsc1247367 Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

5.2CVSS6.8AI score0.00033EPSS
Exploits0References6
OSV
OSV
added 2025/08/19 12:52 p.m.2 views

SUSE-SU-2025:02913-1 Security update for docker

This update for docker fixes the following issues: - Update to Docker 28.3.3-ce. - CVE-2025-54388: Fixed a bug where firewalld when reloaded can make published container ports accessible from remote hosts. bsc1247367...

5.1CVSS7.2AI score0.00033EPSS
Exploits0References4
Veracode
Veracode
added 2025/08/12 7:1 a.m.2 views

Network Isolation Bypass

github.com/moby/moby is vulnerable to network isolation bypass. The vulnerability is due to Docker failing to re-create iptables rules isolating bridge networks after firewalld reload, which allows an attacker to access all ports of containers across different bridge networks on the same host,...

5.2CVSS7AI score0.00019EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2025/08/11 5:24 p.m.1 views

GO-2025-3830 Moby firewalld reload makes published container ports accessible from remote hosts in github.com/docker/docker

Moby firewalld reload makes published container ports accessible from remote hosts in github.com/docker/docker...

5.1CVSS7.2AI score0.00033EPSS
Exploits0References4
Veracode
Veracode
added 2025/08/08 6:25 p.m.2 views

Improper Access Control

github.com/moby/moby is vulnerable to improper access control. The vulnerability is due to failure to recreate firewall rules blocking external access to containers after a firewalld reload, which allows an attacker to remotely access containers with ports published to localhost...

5.1CVSS7AI score0.00033EPSS
Exploits0References3Affected Software3
Cvelist
Cvelist
added 2025/07/30 1:24 p.m.6 views

CVE-2025-54388 Moby's Firewalld reload makes published container ports accessible from remote hosts

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules including...

5.1CVSS0.00033EPSS
Exploits0References3
CVE
CVE
added 2025/07/30 1:24 p.m.85 views

CVE-2025-54388

CVE-2025-54388 affects Moby/Docker Engine. In versions 28.2.0–28.3.2, reloading firewalld can wipe all iptables rules, including Docker-created ones. Docker should recreate these rules, but prior to 28.3.3 it fails to recreate the specific rules that block external access to containers. As a resu...

5.1CVSS6.1AI score0.00033EPSS
Exploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2025/07/30 1:24 p.m.5 views

CVE-2025-54388

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules including...

5.1CVSS6AI score0.00033EPSS
Exploits0
CNNVD
CNNVD
added 2025/07/30 12:0 a.m.2 views

Moby 安全漏洞

Moby is an open source project of Moby Open Source. It aims to drive containerization of software and help the ecosystem mainstream container technology. A security vulnerability exists in Moby versions 28.2.0 through 28.3.2, which stems from the failure to recreate iptables rules when the...

5.1CVSS6.3AI score0.00033EPSS
Exploits0References5
Broadcom
Broadcom
added 2021/05/10 12:0 a.m.36 views

BSA-2021-1481

Security Advisory ID : BSA-2021-1481 Component : IPv6 networking Revision : 1.0 The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, increasing the potential attack surface. When IPv6 networking is enabled on t...

3.5CVSS5.2AI score0.00237EPSS
Exploits0
Rows per page
Query Builder