1989 matches found
GHSA-PWHC-RPQ9-4C8W containerd affected by a local privilege escalation via wide permissions on CRI directory
Impact An overly broad default permission vulnerability was found in containerd. - /var/lib/containerd was created with the permission bits 0o711, while it should be created with 0o700 - Allowed local users on the host to potentially access the metadata store and the content store -...
Incorrect Execution-Assigned Permissions
Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions when initialising host directories with 711 and 755 permissions instead of 700. An attacker can gain unauthorized access to sensitive data and potentially escalate privileges by accessing...
containerd affected by a local privilege escalation via wide permissions on CRI directory
Impact An overly broad default permission vulnerability was found in containerd. - /var/lib/containerd was created with the permission bits 0o711, while it should be created with 0o700 - Allowed local users on the host to potentially access the metadata store and the content store -...
containerd 安全漏洞
containerd is an industry-standard container runtime open-sourced by containerd. A security vulnerability exists in containerd versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1, which originates in the directory path /var/li...
PT-2025-45403
Name of the Vulnerable Software and Affected Versions containerd versions 1.7.28 and below containerd versions 2.0.0-beta.0 through 2.0.6 containerd versions 2.1.0-beta.0 through 2.1.4 containerd versions 2.2.0-beta.0 through 2.2.0-rc.1 Description containerd, an open-source container runtime, is...
CVE-2024-25621: Incorrect Execution-Assigned Permissions
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...
PT-2025-45348
Name of the Vulnerable Software and Affected Versions containerd versions 0.1.0 through 1.7.28 containerd versions 2.0.0-beta.0 through 2.0.6 containerd versions 2.1.0-beta.0 through 2.1.4 containerd versions 2.2.0-beta.0 through 2.2.0-rc.1 Description containerd is an open-source container runti...
Fedora: Security Advisory (FEDORA-2025-bacdac27c8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2021-1457
Malware in sbrugna...
EUVD-2021-2187
Malware in sbrugna...
EUVD-2022-5937
Malicious code in bioql PyPI...
EUVD-2023-0722
Malicious code in bioql PyPI...
EUVD-2022-7476
Malicious code in bioql PyPI...
EUVD-2024-0272
Malicious code in bioql PyPI...
EUVD-2025-15953
Malicious code in bioql PyPI...
EUVD-2025-16049
Malicious code in bioql PyPI...
EUVD-2022-0652
Malicious code in bioql PyPI...
EUVD-2022-0879
Malicious code in bioql PyPI...
NewStart CGSL MAIN 6.06 : neod Multiple Vulnerabilities (NS-SA-2025-0234)
The remote NewStart CGSL host, running version MAIN 6.06, has neod packages installed that are affected by multiple vulnerabilities: - containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root...
CVE-2025-47910 vulnerabilities
Vulnerabilities for packages: rabbitmq-messaging-topology-operator, terraform-provider-azapi, nova, src, ko, kor, spire-controller-manager, cloud-provider-vsphere, containerd, aws-eks-pod-identity-agent, aws-privateca-issuer, hubble, kuberlr, cloud-sql-proxy, k3d, dex, wgcf, kapp-controller,...