9904 matches found
CVE-2024-4460
CVE-2024-4460: ZenML prior to v0.57.1 is affected by a DoS due to improper handling of newline characters in component names when adding components via API (api/v1/workspaces/default/components). This can cause uncontrolled resource consumption and prevent adding components or registering stacks;...
Important: docker
Issue Overview: A file permissions vulnerability was found in Moby Docker Engine. Copying files by using into a specially-crafted container can result in Unix file permission changes for existing files in the host's filesystem, which might lead to permissions escalation and allow an attacker acce...
CVE-2020-27352
When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...
CVE-2020-27352
The CVE-2020-27352 issue affects snapd (e.g., the docker snap and similar snaps) where the systemd service units for these snaps are generated without setting Delegate=yes. This omission allows systemd to move processes from containers managed by the snap into the cgroup of the snap’s main daemon...
CVE-2020-27352
When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...
CVE-2020-27352
When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...
CVE-2020-27352
When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...
Extrude - Analyse Binaries For Missing Security Features, Information Disclosure And More...
Analyse binaries for missing security features, information disclosure and more. Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage Usage: extrude flags file Flags: -a, --all Show details of all test...
New Malware Targets Exposed Docker APIs for Cryptocurrency Mining
Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...
GHSA-34JH-P97F-MPXF vulnerabilities
Vulnerabilities for packages: airflow, k8s-sidecar, kubeflow-volumes-web-app, py3-urllib3, reflex, ggshield, kubeflow-katib, mlflow, kubeflow-jupyter-web-app, checkov, superset, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kubeflow-pipelines, az, dask-gateway, py3-pipenv,...
CVE-2024-37891 vulnerabilities
Vulnerabilities for packages: airflow, k8s-sidecar, kubeflow-volumes-web-app, py3-urllib3, reflex, ggshield, kubeflow-katib, mlflow, kubeflow-jupyter-web-app, checkov, superset, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kubeflow-pipelines, az, dask-gateway, py3-pipenv,...
Exploit for Code Injection in Iterm2
CVE-2024-38396 and CVE-2024-38395 This PoC can e used either...
OPENSUSE-SU-2024:13689-1 docker-24.0.7_ce-3.1 on GA media
These are all security issues fixed in the docker-24.0.7ce-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11579-1 docker-20.10.9_ce-1.2 on GA media
These are all security issues fixed in the docker-20.10.9ce-1.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13205-1 docker-24.0.5_ce-2.1 on GA media
These are all security issues fixed in the docker-24.0.5ce-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10723-1 docker-distribution-registry-2.7.1-7.2 on GA media
These are all security issues fixed in the docker-distribution-registry-2.7.1-7.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11051-1 docker-machine-driver-kvm2-1.23.0-1.2 on GA media
These are all security issues fixed in the docker-machine-driver-kvm2-1.23.0-1.2 package on the GA media of openSUSE Tumbleweed...