Lucene search
+L

5773 matches found

OSV
OSV
added 2023/04/04 10:15 p.m.7 views

UBUNTU-CVE-2023-28842

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS6.9AI score0.0144EPSS
SaveExploits0References8
Prion
Prion
added 2023/04/04 10:15 p.m.26 views

Design/Logic Flaw

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

4CVSS7.8AI score0.0271EPSS
SaveExploits1References10Affected Software1
UbuntuCve
UbuntuCve
added 2023/04/04 10:15 p.m.477 views

CVE-2023-28840

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

8.7CVSS6.7AI score0.0271EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
added 2023/04/04 9:13 p.m.80 views

Docker Swarm encrypted overlay network may be unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

8.7CVSS7.4AI score0.0271EPSS
SaveExploits1References9Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/04 9:13 p.m.5 views

CVE-2023-28840 moby/moby's dockerd daemon encrypted overlay network may be unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

7.5CVSS8.3AI score0.0271EPSS
SaveExploits1References10
CVE
CVE
added 2023/04/04 9:13 p.m.748 views

CVE-2023-28840

CVE-2023-28840 affects Moby/dockerd with Swarm overlay networks (VXLAN) in encrypted mode. The vulnerability stems from how iptables rules (using xt_u32) enforce IPSec for encrypted overlays; admin firewall rules can override Moby’s, potentially allowing unencrypted traffic, and arbitrary Etherne...

8.7CVSS8.4AI score0.0271EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2023/04/04 9:13 p.m.40 views

CVE-2023-28840 moby/moby's dockerd daemon encrypted overlay network may be unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

7.5CVSS7.3AI score
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2023/04/04 9:12 p.m.75 views

Docker Swarm encrypted overlay network traffic may be unencrypted

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS6.8AI score0.00691EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2023/04/04 9:12 p.m.29 views

CVE-2023-28841 moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS6.9AI score
SaveExploits0References13
Debian CVE
Debian CVE
added 2023/04/04 9:12 p.m.37 views

CVE-2023-28841

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS6.8AI score0.00691EPSS
SaveExploits1
Cvelist
Cvelist
added 2023/04/04 9:12 p.m.34 views

CVE-2023-28841 moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.6AI score0.00691EPSS
SaveExploits1References11
CVE
CVE
added 2023/04/04 9:12 p.m.707 views

CVE-2023-28841

CVE-2023-28841 describes a vulnerability in Moby/Docker Swarm encrypted overlay networks where, on affected platforms, encrypted overlay traffic can silently transmit unencrypted data due to how IPSec/VXLAN are enforced via iptables rules (using the xt_u32 module and VNI filtering). This can allo...

6.8CVSS7.4AI score0.00691EPSS
SaveExploits1References11Affected Software1
Github Security Blog
Github Security Blog
added 2023/04/04 9:11 p.m.44 views

Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7AI score0.0144EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2023/04/04 9:11 p.m.62 views

GHSA-6WRF-MXFJ-PF5P Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.8AI score0.0271EPSS
SaveExploits2References7
CVE
CVE
added 2023/04/04 9:7 p.m.757 views

CVE-2023-28842

CVE-2023-28842 affects Moby/dockerd, specifically Swarm overlay with encrypted VXLAN: an endpoint on an encrypted overlay can be unauthenticated, allowing cleartext VXLAN traffic to be injected or leaked under certain conditions. The issue stems from how iptables rules and IPsec handling are appl...

6.8CVSS7.6AI score0.0144EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
added 2023/04/04 9:7 p.m.47 views

CVE-2023-28842

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7AI score0.0144EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2023/04/04 9:7 p.m.5 views

CVE-2023-28842 moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.5AI score0.0144EPSS
SaveExploits0References8
OSV
OSV
added 2023/04/04 9:7 p.m.43 views

CVE-2023-28842 moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

6.8CVSS7.2AI score
SaveExploits0References10
OSV
OSV
added 2023/04/04 1:15 p.m.2 views

DEBIAN-CVE-2023-28997

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can recover and modify the contents of end-to-end encrypted files. Users should upgrade the Nextcloud Desktop client to 3.6.5...

6.5CVSS6.3AI score0.01113EPSS
SaveExploits1References1
NVD
NVD
added 2023/04/04 1:15 p.m.35 views

CVE-2023-28998

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure, and add new...

6.7CVSS6.5AI score0.00679EPSS
SaveExploits1References3
Rows per page
Query Builder