21900 matches found
Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive
Impact When processing a build contexts or add/copy instructions, a malicious server serving a Git repository or a tar archive file can cause files outside of the build context directory to be included in the build context or copied into the build. Patches Fixed in Buildah 1.44 and 1.43.2...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...
Directory Traversal
Overview github.com/containers/buildah/imagebuildah is a tool that facilitates building OCI images. Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of build contexts or when handling add or copy instructions. An attacker can access files outside of the intended build context by serving a malicious Git repository or tar archive, potentially...
MINI-WQ2F-667J-GW26
Bulletin has no description...
MINI-7QV9-449C-M8RX
Bulletin has no description...
MINI-FQM7-G6XQ-49VX
Bulletin has no description...
MINI-PC63-FHQM-MVRF
Bulletin has no description...
MINI-MQPQ-837W-4GG9
Bulletin has no description...
MINI-CQHC-G5J3-H3JQ
Bulletin has no description...
MINI-M994-CMGX-46F5
Bulletin has no description...
MINI-JGFG-Q5MJ-V463
Bulletin has no description...
kernel: bnxt_en: Fix RSS context delete logic
A flaw was found in the bnxten driver of the Linux kernel. An issue in the RSS Receive Side Scaling context deletion logic can lead to a leak of VNICs Virtual Network Interface Controllers in the firmware. This can cause subsequent attempts to create new VNICs to fail, resulting in the loss of...
CVE-2026-56306: Improper Input Validation
Capgo before 12.128.2 contains a weak parsing vulnerability in the x-limited-key-id header that allows attackers to bypass subkey enforcement by submitting malformed values, zero, or duplicate headers that result in NaN or falsy values. Remote attackers can manipulate the x-limited-key-id header ...
CVE MCP Server 0.2.0
CVE MCP Server is a production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds...
Adobe DNG Software Development Kit (SDK) heap buffer overflow vulnerability (CNVD-2026-26864)
The Adobe DNG Software Development Kit SDK is a software development toolkit launched by Adobe Inc. The Adobe DNG Software Development Kit SDK contains a heap buffer overflow vulnerability, allowing attackers to execute arbitrary code within the context of the current user...
podman -- files outside build context may be included via malicious Git repo or tar archive
The Podman developers report: Building a Dockerfile using an ADD or COPY instruction accessing a malicious Git repository or tar archive could cause files outside the build context directory to be included in the build context or copied into the build...
RHEL 8 : libxml2 (RHSA-2026:27736)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:27736 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: buffer over-read in...