2809 matches found
[SECURITY] Fedora 42 Update: apptainer-1.4.5-2.fc42
Apptainer provides functionality to make portable containers that can be used across host environments...
A Systematic Mapping Study on Risks and Vulnerabilities in Software Containers
Software containers are widely adopted for developing and deploying software applications. Despite their popularity, major security concerns arise during container development and deployment. Software Engineering SE research literature reveals a lack of reviewed, aggregated, and organized knowled...
SAMSUNG多款产品 安全漏洞
SAMSUNG Mobile Processor and others are products of the South Korean company Samsung.SAMSUNG Mobile Processor is a series of mobile processors.SAMSUNG Wearable Processor is a series of wearable processors.SAMSUNG Modem Exynos is a SAMSUNG Modem Exynos is a series of modem chips. A security...
Malicious Package
Overview tailwindcss-containers is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...
[SECURITY] Fedora 42 Update: buildah-1.42.1-1.fc42
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
CVE-2025-64655
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-64655
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability
...
CVE-2025-64655
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-64655
CVE-2025-64655 : Multiple sources corroborate an improper authorization vulnerability in the Dynamics OmniChannel SDK Storage Containers that could allow network-based privilege elevation. Affected product is the Dynamics OmniChannel SDK Storage Containers; root cause is improper authorization le...
CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability
...
Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...
Microsoft Dynamics OmniChannel SDK Storage Containers 授权问题漏洞
Microsoft Dynamics OmniChannel SDK Storage Containers is a container for storing, accessing, or managing records from Microsoft Corporation, USA. An authorization issue vulnerability exists in Microsoft Dynamics OmniChannel SDK Storage Containers that stems from improper authorization and could...
PT-2025-47645
Name of the Vulnerable Software and Affected Versions Dynamics OmniChannel SDK Storage Containers affected versions not specified Description An improper authorization issue exists in Dynamics OmniChannel SDK Storage Containers, potentially allowing an unauthorized attacker to elevate privileges...
Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics Advanced Certified Containers
Summary Multiple vulnerabilities were addressed in IBM Planning Analytics Advanced Certified Containers 3.1.2. Vulnerability Details CVEID:CVE-2025-23166 DESCRIPTION: The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a...
HSEC-2023-0001 Hash flooding vulnerability in aeson
Hash flooding vulnerability in aeson aeson was vulnerable to hash flooding a.k.a. hash DoS. The issue is a consequence of the HashMap implementation from unordered-containers. It results in a denial of service through CPU consumption. This technique has been used in real-world attacks against a...
[SECURITY] Fedora 41 Update: runc-1.3.3-1.fc41
The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc...
[SECURITY] Fedora 42 Update: runc-1.3.3-1.fc42
The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc...
Improper File Access
runc is vulnerable to improper file access. The vulnerability is due to insufficient validation of write targets in /proc during concurrent container execution with shared mounts, which allows an attacker to exploit race conditions and redirect writes to unintended procfs files...
