Security Bulletin: IBM Edge Application Manager 4.5 addresses the security vulnerability listed in the CVE below.

Summary IBM Edge Application Manager 4.5 addresses the security vulnerability listed in the CVE below. Vulnerability Details CVEID:CVE-2021-3918 DESCRIPTION: Json-schema could allow a remote attacker to execute arbitrary code on the system, caused by an improperly controlled modification of objec...

Security Bulletin: IBM Edge Application Manager 4.5 addresses the security vulnerability listed in the CVE below.

Summary IBM Edge Application Manager 4.5 addresses the security vulnerability listed in the CVE below. Vulnerability Details CVEID:CVE-2021-42740 DESCRIPTION: Node.js shell-quote module could allow a remote attacker to execute arbitrary commands on the system, caused by a flaw with windows drive...

Code injection

CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the ckan user equivalent to www-data owned code and configuration files in the docker container and the ckan user had the permissions to use sudo. These issues allowed for co...

CVE-2023-32696 Excessive permissions for ckan user

CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the ckan user equivalent to www-data owned code and configuration files in the docker container and the ckan user had the permissions to use sudo. These issues allowed for co...

CVE-2023-32696 Excessive permissions for ckan user

CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the ckan user equivalent to www-data owned code and configuration files in the docker container and the ckan user had the permissions to use sudo. These issues allowed for co...

PT-2023-23970 · Ckan · Ckan

Name of the Vulnerable Software and Affected Versions: CKAN versions prior to 2.9.9 CKAN versions prior to 2.10.1 Description: CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the ckan user, equivalent to www-data, owned co...

CVE-2023-32696: Improper Privilege Management

CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the ckan user equivalent to www-data owned code and configuration files in the docker container and the ckan user had the permissions to use sudo. These issues allowed for co...

Debian: Security Advisory (DSA-5414-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5414-1] docker-registry security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5414-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 27, 2023 https://www.debian.org/security/faq -...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

PoC exploit for CVE-2023-30212, a Cross-Site Scripting XSS vul...

Docker Desktop parameter injection vulnerability

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

Docker Desktop code injection vulnerability

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

DSA-5414-1 docker-registry - security update

Bulletin has no description...

Docker Desktop security vulnerabilities

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

Debian DSA-5414-1 : docker-registry - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5414 advisory. - Systems that run distribution built after a specific commit running on memory-restricted environments can suffer from denial of service by a crafted malicious /v2/catalo...

Privilege Escalation

github.com/kubernetes/minikube is vulnerable to Privilege Escalation. A remote attacker is able to access to the minikube container with elevated privileges due to an exposed network port when minikube is running on macOS with the Docker driver...