Lucene search
+L

45044 matches found

OSV
OSV
•added 2026/09/15 5:17 p.m.•6 views

AZL-103071 CVE-2026-79699 affecting package cri-o 1.30.1-1

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.8AI score0.00173EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/15 5:17 p.m.•7 views

AZL-103062 CVE-2026-79699 affecting package buildah 1.43.1-3

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.8AI score0.00173EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/15 5:17 p.m.•12 views

CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS0.00173EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 5:17 p.m.•5 views

AZL-103227 CVE-2026-79699 affecting package libcontainers-common 20240213-3

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.8AI score0.00173EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/15 5:17 p.m.•6 views

AZL-103269 CVE-2026-79699 affecting package skopeo 1.14.4-13

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.8AI score0.00173EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/15 5:17 p.m.•7 views

AZL-103089 CVE-2026-79699 affecting package podman 5.6.1-10

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.8AI score0.00173EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/15 5:17 p.m.•11 views

DEBIAN-CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.7AI score0.00173EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/15 5:17 p.m.•14 views

CVE-2026-54547 Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in metaadsmcp/core/httpauthintegration.py rejects HTTP MCP requests only when both authtoken and pipeboardtoken are absent, while extracttokenfromheaders doe...

7.4CVSS5.8AI score
SaveExploits0References6
CVE
CVE
•added 2026/09/15 5:08 p.m.•34 views

CVE-2026-12666

IBM MQ Classes for Java is vulnerable to XML external entity (XXE) injection in the MQRFH2 header parser (CWE-611). An authenticated attacker can exploit this to obtain sensitive information (high confidentiality impact) or cause a denial of service (high availability impact). The CVSS 3.1 base s...

8.1CVSS5.7AI score0.00264EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/15 5:08 p.m.•15 views

EUVD-2026-78873

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 Classes for Java could allow an authenticated attacker to obtain sensitive information or cause a...

8.1CVSS5.7AI score0.00264EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/15 4:25 p.m.•13 views

EUVD-2026-78824

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.7AI score0.00173EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/15 4:25 p.m.•12 views

CVE-2026-79699 Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.8AI score0.00173EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/15 4:25 p.m.•32 views

CVE-2026-79699

A flaw in the containers/storage library (used by Podman , buildah , and skopeo ) allows a crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) to replace the extraction destination directory with an arbitrary file when processed by UnpackLayer, ApplyLayer, or ApplyUncomp...

4.4CVSS5.7AI score0.00173EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/15 4:25 p.m.•16 views

CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.7AI score0.00173EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/09/15 4:25 p.m.•10 views

CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.8AI score0.00173EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/15 4:25 p.m.•34 views

CVE-2026-79699 Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS0.00173EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 4:17 p.m.•13 views

CVE-2026-59157

webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authentication forwarded all incoming HTTP headers through HTTPParamsToShellVars in pkg/api/index.go into the hook script...

6.5CVSS0.00596EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/15 4:17 p.m.•10 views

DEBIAN-CVE-2024-58384

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS5.9AI score0.00242EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/15 4:17 p.m.•9 views

CVE-2024-58384

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS0.00242EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 4:17 p.m.•6 views

AZL-103104 CVE-2024-58384 affecting package python-tornado 6.3.3-11

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS5.9AI score0.00242EPSS
SaveExploits0References1
Rows per page
Query Builder