13573 matches found
SUSE-RU-2024:4391-1 Recommended update for docker-stable
This update for docker-stable fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at . Some notable changelogs from the last update: - Add a new toggle file /etc/docker/suse-secrets-enable which allows users to disable the SUSEConnect integration with Dock...
Exploit for Cross-site Scripting in Melapress Wp_Activity_Log
CVE-2024-10793 PoC Set this lines to your hosts file:...
CVE-2024-35141
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges...
CVE-2024-35141
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges...
CVE-2024-35141 IBM Security Verify Access privilege escalation
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges...
CVE-2024-35141: Execution with Unnecessary Privileges
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges...
docker-27.4.1_ce-12.1 on GA media (moderate)
docker-27.4.1ce-12.1 on GA media Announcement ID: openSUSE-SU-2024:14597-1 Rating: moderate Cross-References: CVE-2024-29018 CVSS scores: CVE-2024-29018 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2024-29018 SUSE : 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:...
IBM Security Verify Access Docker security vulnerabilities
IBM Security Verify Access Docker is a service from International Business Machines IBM that can be used to configure a Security Verify Access environment for Docker. A security vulnerability exists in IBM Security Verify Access Docker versions 10.0.0 through 10.0.6, which stems from a...
CVE-2024-55603: Insufficient Session Expiration
Kanboard is project management software that focuses on the Kanban methodology. In affected versions sessions are still usable even though their lifetime has exceeded. Kanboard implements a cutom session handler app/Core/Session/SessionHandler.php, to store the session data in a database...
GHSA-W32M-9786-JP63 vulnerabilities
Vulnerabilities for packages: smarter-device-manager, wireguard-go, sftpgo-plugin-pubsub, cloudnative-pg, kbld, crossplane, hubble-ui, gobuster, timoni, secrets-store-csi-driver-provider-aws, thanos, terraform-provider-azurerm, k9s, ollama, crossplane-provider-azure-managedidentity, spicedb, k3s,...
CVE-2024-45338 vulnerabilities
Vulnerabilities for packages: smarter-device-manager, wireguard-go, sftpgo-plugin-pubsub, cloudnative-pg, kbld, crossplane, hubble-ui, gobuster, timoni, secrets-store-csi-driver-provider-aws, thanos, terraform-provider-azurerm, k9s, ollama, crossplane-provider-azure-managedidentity, spicedb, k3s,...
AZL-54446 CVE-2024-45338 affecting package docker-compose for versions less than 2.27.0-3
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
AZL-54404 CVE-2024-45338 affecting package docker-buildx for versions less than 0.14.0-3
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
CVE-2024-45338 vulnerabilities
Vulnerabilities for packages: smarter-device-manager, wireguard-go, actions-runner-controller-fips, flux-image-automation-controller-fips, sftpgo-plugin-pubsub, cloudnative-pg, azuredisk-csi-fips, prometheus-bind-exporter, amazon-cloudwatch-agent-fips, kubernetes-dashboard-fips, kbld, crossplane,...
SUSE SLES15: docker / docker-bash-completion / docker-fish-completion / etc (SUSE-SU-2024:4360-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4360-1 advisory. - Update docker-buildx to v0.19.2. See upstream changelog online at . Some notable changelogs from the last update: -...
openSUSE Security Advisory (SUSE-SU-2024:4360-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2024:14597-1 docker-27.4.1_ce-12.1 on GA media
These are all security issues fixed in the docker-27.4.1ce-12.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14598-1 docker-stable-24.0.9_ce-6.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9ce-6.1 package on the GA media of openSUSE Tumbleweed...
PT-2024-36564 · Kanboard +1 · Kanboard +1
Name of the Vulnerable Software and Affected Versions: Kanboard versions prior to 1.2.43 Description: Kanboard is project management software that focuses on the Kanban methodology. In affected versions, sessions are still usable even though their lifetime has exceeded. Kanboard implements a cust...
