Lucene search
K

9 matches found

OSV
OSV
added 2026/03/31 3:15 a.m.0 views

DEBIAN-CVE-2026-33997

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

8.1CVSS5.2AI score0.00016EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-6181

Malware in sbrugna...

5.5CVSS5.4AI score0.00048EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 10:8 a.m.5 views

CVE-2024-23908

Insecure inherited permissions in some Flexlm License Daemons for IntelR FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.2AI score0.00071EPSS
Exploits0References1
OSV
OSV
added 2024/09/10 4:15 p.m.1 views

UBUNTU-CVE-2024-45593

Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has access. This will be with root...

9CVSS5.9AI score0.00449EPSS
Exploits0References4
Veracode
Veracode
added 2019/01/15 9:19 a.m.30 views

Remote Code Execution (RCE)

Supervisor is vulnerable to remote code execution RCE attacks. A malicious user can send a malicious XMLRPC request to the application to inject and execute arbitrary commands at daemon level privilege...

8.8CVSS9.2AI score0.93832EPSS
Exploits10References176Affected Software6
Veracode
Veracode
added 2017/07/24 10:39 p.m.29 views

Remote Code Execution (RCE)

Supervisor is vulnerable to remote code execution RCE attacks. A malicious user can send a malicious XMLRPC request to the application to inject and execute arbitrary commands at daemon level privilege...

9CVSS9.2AI score0.93832EPSS
Exploits10References12Affected Software1
Packet Storm
Packet Storm
added 2016/09/17 12:0 a.m.25 views

Docker Daemon Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Docker Daemon Privilege Escalation', 'Description' = %q This module obtains root privileges from any host account with access to the Docker daemon...

0.8AI score
Exploits0
UbuntuCve
UbuntuCve
added 2015/11/24 8:59 p.m.22 views

CVE-2015-0856

daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme...

4.6CVSS7.1AI score0.00167EPSS
Exploits0References1
exploitpack
exploitpack
added 2001/04/24 12:0 a.m.11 views

Sendfile 1.x2.1 - Forced Privilege Lowering Failure

Sendfile 1.x2.1 - Forced Privilege Lowering Failure source: https://www.securityfocus.com/bid/2652/info Sendfile is an implementation of the SAFT simple asynchronous file transfer protocol for UNIX systems. A serialization error exists in the Sendfile daemon, sendfiled. When used in conjunction...

Exploits0
Rows per page
Query Builder