Lucene search
+L

9705 matches found

Wolfi
Wolfi
added 2026/06/26 8:22 p.m.16 views

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: zot, external-dns, aactl, opentelemetry-collector, knative-serving, kyverno, flux, cilium-cli, kubernetes-dashboard, minio, kubernetes, nerdctl, containerd, mattermost, cloud-provider-aws, kots, kaf, telegraf, gitlab-kas, cert-manager, istio, spire-server, helm,...

5.2AI score
SaveExploits0
OSV
OSV
added 2026/06/26 7:26 p.m.12 views

CVE-2026-46386 OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal`

OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docker image ships ENV SECRETKEYBASE=OVERWRITEME as the default Rails master key. Combined with cookiesserializer = :marshal, this gives any logged-in user a deterministic...

9.9CVSS6AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/26 7:26 p.m.30 views

CVE-2026-46386 OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal`

OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docker image ships ENV SECRETKEYBASE=OVERWRITEME as the default Rails master key. Combined with cookiesserializer = :marshal, this gives any logged-in user a deterministic...

9.9CVSS0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/26 7:26 p.m.44 views

CVE-2026-46386

OpenProject’s official docker image ships SECRET_KEY_BASE=OVERWRITE_ME and cookies_serializer = :marshal, creating a deterministic Marshal-deserialization path reachable via the /my/two_factor_devices cookie reader. This enables potential pre-authentication remote code execution, as noted in the ...

9.9CVSS5.8AI score0.00272EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/26 7:9 a.m.11 views

CVE-2026-54232

A flaw was found in vLLM, an inference and serving engine for large language models LLMs. This vulnerability, a dependency confusion attack, allows a remote attacker to execute arbitrary code with root privileges during the Docker build process. By exploiting this, an attacker can compromise the...

8.8CVSS6.1AI score0.00563EPSS
SaveExploits1References4
Chainguard
Chainguard
added 2026/06/26 2:16 a.m.18 views

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, spark-fips, wildfly, spark, wavefront-proxy, keycloak, solr-fips, jenkins, camunda, cassandra, pinot-fips, apache-activemq, kafka-fips, keycloak-fips, management-api-for-apache-cassandra-4.0, geoserver, strimzi-kafka-operator, wazuh-indexer,...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/06/26 2:16 a.m.20 views

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, spark-fips, wildfly, spark, wavefront-proxy, keycloak, solr-fips, jenkins, camunda, cassandra, pinot-fips, apache-activemq, kafka-fips, keycloak-fips, management-api-for-apache-cassandra-4.0, geoserver, strimzi-kafka-operator, wazuh-indexer,...

5.3CVSS5AI score0.00345EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/26 2:16 a.m.14 views

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: opensearch, gradle, spdx-tools-java, apache-pulsar, tez, apache-tika, management-api-for-apache-cassandra-5.0, zookeeper, airflow, ruby4.0-jrjackson, ruby3.3-jrjackson, zipkin, logstash, scala, infinispan, akhq, dependency-track, confluent-common-docker,...

5.3CVSS5AI score0.00345EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/26 2:16 a.m.15 views

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: opensearch, gradle, spdx-tools-java, apache-pulsar, tez, apache-tika, management-api-for-apache-cassandra-5.0, zookeeper, airflow, ruby4.0-jrjackson, ruby3.3-jrjackson, zipkin, logstash, scala, infinispan, akhq, dependency-track, confluent-common-docker,...

5.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:0 a.m.11 views

Fedora 43 : docker-buildx (2026-3cca6f41d4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3cca6f41d4 advisory. - Update to release v0.35.0 - Resolves: rhbz2487819 - Resolves CVE-2026-39828: rhbz2489918, rhbz2490102 - Upstream enhancements, new features, and...

8.8CVSS6.7AI score0.00467EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:0 a.m.10 views

SUSE SLES15: docker-stable / docker-stable-bash-completion / etc (SUSE-SU-2026:2579-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2579-1 advisory. - CVE-2026-33997: Fixed privilege validation bypass during plugin bsc1265907. - CVE-2026-34040: Fixed Authz zero length regression...

8.8CVSS7.5AI score0.1014EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:0 a.m.9 views

Fedora 44 : docker-buildkit (2026-1e00728616)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1e00728616 advisory. - Update to release v0.31.0 - Resolve CVE-2026-39829: rhbz2489939, rhbz2490056 - Upstream new features and fixes Tenable has extracted the preceding...

8.8CVSS6.7AI score0.00467EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:0 a.m.9 views

SUSE SLES12 Security Update : docker-stable (SUSE-SU-2026:2578-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2578-1 advisory. This update for docker-stable fixes the following issues - CVE-2026-33747: github.com/moby/buildkit: malicious frontends can craft API messages...

9.8CVSS7.4AI score0.1014EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:0 a.m.9 views

Fedora 43 : docker-buildkit (2026-1a714d39b0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1a714d39b0 advisory. - Update to release v0.31.0 - Resolve CVE-2026-39829: rhbz2489939, rhbz2490056 - Upstream new features and fixes Tenable has extracted the preceding...

8.8CVSS6.7AI score0.00467EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/26 12:0 a.m.27 views

PT-2026-52984

Name of the Vulnerable Software and Affected Versions Kestra versions prior to 1.0.45 Kestra versions prior to 1.3.21 Description The authentication filter for the REST API endpoint /api/v1/ incorrectly treats any request path ending in /configs as a public instance-config endpoint, allowing it t...

10CVSS5.8AI score0.02186EPSS
SaveExploits3References15
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:0 a.m.13 views

Fedora 44 : docker-buildx (2026-105f7df940)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-105f7df940 advisory. - Update to release v0.35.0 - Resolves: rhbz2487819 - Resolves CVE-2026-39828: rhbz2489918, rhbz2490102 - Upstream enhancements, new features, and...

8.8CVSS6.7AI score0.00467EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/25 10:34 p.m.8 views

GO-2026-5639 Portainer missing authorization on Docker plugin endpoints, which allows host RCE in github.com/portainer/portainer

Portainer missing authorization on Docker plugin endpoints, which allows host RCE in github.com/portainer/portainer. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

9.4CVSS5.9AI score0.00328EPSS
SaveExploits1References5
OSV
OSV
added 2026/06/25 10:34 p.m.9 views

GO-2026-5746 Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

The Docker daemon's implementation of the "PUT /containers/id/archive" endpoint executes a container binary on the host when extracting an archive to a container. On Unix-like systems, this can be exploited if an attacker can control the container's filesystem or the archive being extracted,...

7.5CVSS7.1AI score0.00161EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/25 10:34 p.m.7 views

GO-2026-5668 Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap in github.com/docker/docker

Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap in github.com/docker/docker...

6.1CVSS6AI score0.00108EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/25 10:34 p.m.7 views

GO-2026-5617 Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

A race condition in the Docker daemon allows an attacker to redirect bind mounts to arbitrary host paths during a "docker cp" operation. The affected code is in the daemon package, specifically the openContainerFS method. This is daemon-owned, Linux-specific code and is not intended for external...

7.2CVSS7.2AI score0.00104EPSS
SaveExploits0References1
Rows per page
Query Builder