16810 matches found
Cross-Site Scripting (Reflected XSS)
com.liferay, com.liferay.layout.taglib is vulnerable to reflected cross-site scripting XSS. The vulnerability is due to improper validation of the embedded message field in the form container, which allows an attacker to inject and execute arbitrary JavaScript in a victim’s browser...
The vulnerability of the software for creating and running NVIDIA Container Toolkit lies in insufficient spatial partitioning. This allows a malicious actor to execute arbitrary code, cause service failures, or disclose sensitive information.
The vulnerability of the software used for creating and running NVIDIA Container Toolkit is related to insufficient spatial partitioning. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, cause service failures, or expose sensitive information...
The vulnerability of the software for creating and running NVIDIA Container Toolkit lies in insufficient spatial partitioning. This allows a malicious actor to trigger a service failure and gain increased privileges.
The vulnerability of the software used for creating and running NVIDIA Container Toolkit is related to insufficient spatial partitioning. Exploiting this vulnerability can allow a malicious actor to cause service failures and increase their privileges...
SUSE CVE-2024-22036
A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...
CVE-2024-47120
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and attack surface on the host due to the containers running with unnecessary privileges...
[SECURITY] Fedora 43 Update: checkpointctl-1.4.0-2.fc43
The checkpointctl command can be used for in-depth analysis of container checkpoints created with Podman and Kubernetes...
[SECURITY] Fedora 41 Update: checkpointctl-1.4.0-2.fc41
The checkpointctl command can be used for in-depth analysis of container checkpoints created with Podman and Kubernetes...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.80 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.80 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.80 security and extras update
Red Hat OpenShift Container Platform release 4.12.80 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of...
CVE-2024-47120
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and attack surface on the host due to the containers running with unnecessary privileges...
CVE-2024-47120 IBM Security Verify Information Queue code execution
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and attack surface on the host due to the containers running with unnecessary privileges...
CVE-2024-47120
CVE-2024-47120 affects IBM Security Verify Information Queue (ISIQ) versions 10.0.5–10.0.8. Connected sources indicate the root cause is containers running with unnecessary privileges, enabling a privileged user to escalate privileges and expand the host attack surface. The IBM security bulletin ...
CVE-2024-47120 IBM Security Verify Information Queue code execution
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and attack surface on the host due to the containers running with unnecessary privileges...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.39 security and extras update
Red Hat OpenShift Container Platform release 4.17.39 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...
RHSA-2025:15291 Red Hat Security Advisory: OpenShift Container Platform 4.19.11 packages and security update
Bulletin has no description...
[SECURITY] Fedora 43 Update: buildah-1.41.4-1.fc43
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
[SECURITY] Fedora 43 Update: podman-5.6.1-1.fc43
podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...
[SECURITY] Fedora 42 Update: buildah-1.41.4-1.fc42
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
PT-2025-37095
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue versions 10.0.5 through 10.0.8 Description: IBM Security Verify Information Queue containers may run with unnecessary privileges, potentially allowing a privileged user to escalate their privileges and...
