Lucene search
+L

90 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/29 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-86334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows...

4.2CVSS6.3AI score0.00335EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/28 2:17 p.m.•8 views

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

4.2CVSS0.00335EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/09/28 2:17 p.m.•8 views

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

4.2CVSS6.3AI score0.00335EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/28 2:17 p.m.•5 views

UBUNTU-CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

4.2CVSS6.3AI score0.00335EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/28 1:21 p.m.•8 views

EUVD-2026-88255

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

4.2CVSS6.3AI score0.00335EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/09/28 1:21 p.m.•12 views

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

4.2CVSS6.3AI score0.00335EPSS
SaveExploits0
CVE
CVE
•added 2026/09/28 1:21 p.m.•28 views

CVE-2026-86334

Canonical LXD versions 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms are vulnerable to a path traversal flaw in the CLI client image export and copy functionality. A remote malicious or machine-in-the-middle image server can exploit this by sending a crafted Content-Disposition h...

4.2CVSS6.3AI score0.00335EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/28 1:21 p.m.•8 views

CVE-2026-86334 CLI Path Traversal via Content-Disposition in LXD Image Export/Copy

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

4.2CVSS6.3AI score0.00335EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/02/05 12:00 a.m.•19 views

openSUSE 16 : Recommended update for gimp (SUSE-SU-openSUSE-RU-2026:20168-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-openSUSE-RU-2026:20168-1 advisory. Changes in gimp: - Update to 3.0.8 - Font Loading Performance - Improvements in start-up time for users with a large number of fonts was...

7.8CVSS7.1AI score0.00848EPSS
SaveExploits1References15
Veracode
Veracode
•added 2025/11/21 11:08 a.m.•17 views

Information Disclosure

lxd is vulnerable to Information Disclosure. The vulnerability is due to improper validation in the image export API, where crafted requests using wildcard fingerprints allow unauthenticated network attackers to probe and determine whether projects exist...

6.9CVSS8AI score0.00337EPSS
SaveExploits1References2Affected Software1
Redos
Redos
•added 2025/11/17 12:00 a.m.•21 views

ROS-20251117-04

A vulnerability in the LXD container and lightweight virtual machine management system is related to redundant API data output. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to potentially sensitive information The vulnerability in the LXD container and...

8.8CVSS7.1AI score0.0058EPSS
SaveExploits9
Redos
Redos
•added 2025/11/17 12:00 a.m.•19 views

ROS-20251117-05

A vulnerability in the LXD container and lightweight virtual machine management system is related to redundant API data output. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to potentially sensitive information The vulnerability in the LXD container and...

8.8CVSS7.1AI score0.0058EPSS
SaveExploits9
OSV
OSV
•added 2025/11/05 6:41 p.m.•11 views

GO-2025-4002 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd...

6.9CVSS7AI score0.00337EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2025-54290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without...

6.9CVSS5.9AI score0.00337EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2015-5562

Malware in sbrugna...

9.1CVSS9.3AI score0.03207EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2016-10271

Malware in sbrugna...

5.4CVSS5.4AI score0.01118EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/10/06 5:13 p.m.•11 views

CVE-2025-54290

Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafted requests using wildcard fingerprints...

6.9CVSS6.5AI score0.00337EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-18644

Malicious code in bioql PyPI...

6.3CVSS7.5AI score0.00366EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-32095

Malicious code in bioql PyPI...

6.9CVSS6.3AI score0.00337EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2025/10/02 11:23 p.m.•9 views

SUSE CVE-2025-54290

Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafted requests using wildcard fingerprints...

5.3CVSS6.9AI score0.00337EPSS
SaveExploits1References3
Rows per page
Query Builder