13270 matches found
CVE-2025-47913 affecting package docker-compose for versions less than 2.27.0-6
CVE-2025-47913 affecting package docker-compose for versions less than 2.27.0-6. A patched version of the package is available...
CVE-2025-47913 affecting package docker-buildx for versions less than 0.14.0-8
CVE-2025-47913 affecting package docker-buildx for versions less than 0.14.0-8. A patched version of the package is available...
AZL-71111 CVE-2025-12970 affecting package fluent-bit for versions less than 3.1.10-2
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
AZL-71074 CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-6
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
CVE-2025-12970
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
CVE-2025-12970
The Fluent Bit log collection and processing tool contains a stack buffer overflow vulnerability in the extract_name function of the in_docker input plugin. The flaw occurs because the software copies container names into a fixed-size stack buffer without validating the input length. An attacker ...
CVE-2025-12970 CVE-2025-12970
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
EUVD-2025-198809
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
CVE-2025-12970 CVE-2025-12970
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
CVE-2025-12970 CVE-2025-12970
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
PT-2025-47921
Name of the Vulnerable Software and Affected Versions Fluent Bit versions affected versions not specified Description The extract name function within the in docker input plugin of Fluent Bit contains a buffer overflow issue. This occurs because the function copies container names into a fixed-si...
lab-sqli-v1
🔐 Laboratorio de SQL Injection - Del Principiante al Experto...
Docker Wizard Arbitrary Command Execution
The vulnerability of the Docker Wizard tool for monitoring IT infrastructure Nagios XI relates to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
TencentOS Server 4: moby (TSSA-2024:0335)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0335 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Docker Registrator Code Execution
The vulnerability of the gettreesha function in the Docker Registrator’s automatic registration tool is related to the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Exploit for Double Free in Openbsd Openssh
CVE-2023-25136 Vulnerability Demonstration This project provi...
GHSA-V5W9-PRXF-W882 Flowise has Authentication Bypass Using Unprotected Registration Endpoint (/register)
Summary An unauthenticated attacker can exploit the unprotected registration endpoint /register to create a new user and bypass authentication. Details Critical vulnerability in Flowise 3.0.1 on-premise deployment allows unauthenticated attackers to exploit the /api/v1/account/register endpoint t...
Security Bulletin: Security vulnerability has been found in IBM Application Gateway
Summary Security vulnerability has been addressed in IBM Application Gateway. Vulnerability Details CVEID:CVE-2023-52425 DESCRIPTION: libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple...
