15454 matches found
CVE-2025-41242
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...
Linux Distros Unpatched Vulnerability : CVE-2021-21334
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In containerd an industry-standard container runtime before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation through...
Linux Distros Unpatched Vulnerability : CVE-2021-20188
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abuse...
Linux Distros Unpatched Vulnerability : CVE-2025-8283
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may...
CVE-2025-9039
We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the same security group or if their security groups allow incoming connections that include the port where the server is...
CVE-2025-54867
Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5...
Linux Distros Unpatched Vulnerability : CVE-2025-6032
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue...
Linux Distros Unpatched Vulnerability : CVE-2016-9191
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service...
Malicious code in authorize-daemon-container-awk-kernel (npm)
The package authorize-daemon-container-awk-kernel was found to contain malicious code...
Malicious code in container-await-emulate-double-orchestrate (npm)
The package container-await-emulate-double-orchestrate was found to contain malicious code...
Malicious code in container-private-psi-long-enum (npm)
The package container-private-psi-long-enum was found to contain malicious code...
Malicious code in xml-sandbox-container-process-long (npm)
The package xml-sandbox-container-process-long was found to contain malicious code...
Malicious code in epsilon-scale-error-debug-container (npm)
The package epsilon-scale-error-debug-container was found to contain malicious code...
Malicious code in sanitize-interpret-zero-emulate-container (npm)
The package sanitize-interpret-zero-emulate-container was found to contain malicious code...
Malicious code in enum-sigma-test-double-container (npm)
The package enum-sigma-test-double-container was found to contain malicious code...
Malicious code in finally-sed-process-good-container (npm)
The package finally-sed-process-good-container was found to contain malicious code...
MAL-2025-20570 Malicious code in finally-sed-process-good-container (npm)
The package finally-sed-process-good-container was found to contain malicious code...
MAL-2025-17508 Malicious code in container-private-psi-long-enum (npm)
The package container-private-psi-long-enum was found to contain malicious code...