12321 matches found
CVE-2026-67208: Missing Authentication for Critical Function
Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint,...
CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16
CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16. A patched version of the package is available...
CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4
CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4. A patched version of the package is available...
vulnlab-platform-lab
Local VulnLab Platform The Local VulnLab Platform is a vulner...
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-59726 CVSS score: 10.0, impacts all...
CVE-2026-42306
A flaw was found in the Moby container framework. A race condition occurs during the docker cp mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could...
cve-2026-47873 - HIGH - CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback...
Fedora 45 : docker-buildx (2026-c37317fdde)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c37317fdde advisory. Automatic update for docker-buildx-0.36.0-1.fc45. Changelog Wed Jul 29 2026 Bradley G Smith - 0.36.0-1 - Update to release v0.36.0 - Resolves:...
NewStart CGSL MAIN 6.06 : docker-ce Vulnerability (NS-SA-2026-0054)
The remote NewStart CGSL host, running version MAIN 6.06, has docker-ce packages installed that are affected by a vulnerability: - Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is bui...
globalping-probe v0.50.0
Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community – wi...
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-71261 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-64436 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-64435 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-9M94-W2VQ-HCF9 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-71261 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-7XGM-5PRM-V5GC vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
Freeloader — Updated!
Docker support for plexmediaservercrack Patches Plex Media Server running in Docker — both the official plexinc/pms-docker image and the community lscr.io/linuxserver/plex image — using the same LDPRELOAD-on-the-PMS-exec mechanism as the native systemd install. See the top-level README and the fu...
Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-133 (ALASECS-2026-133)
The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-133 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Parsing...