CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-11

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-11. A patched version of the package is available...

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-11

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-11. A patched version of the package is available...

CVE-2024-40635 affecting package moby-containerd for versions less than 1.6.26-11

CVE-2024-40635 affecting package moby-containerd for versions less than 1.6.26-11. A patched version of the package is available...

CVE-2025-30204 affecting package moby-engine for versions less than 24.0.9-16

CVE-2025-30204 affecting package moby-engine for versions less than 24.0.9-16. A patched version of the package is available...

CVE-2025-30204 affecting package moby-engine for versions less than 25.0.3-12

CVE-2025-30204 affecting package moby-engine for versions less than 25.0.3-12. A patched version of the package is available...

Azure Linux 3.0 Security Update: moby-engine (CVE-2024-29018)

The version of moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29018 advisory. - Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, an...

CVE-2024-45310 affecting package moby-runc for versions less than 1.1.9-8

CVE-2024-45310 affecting package moby-runc for versions less than 1.1.9-8. A patched version of the package is available...

Azure Linux 3.0 Security Update: cri-tools / moby-runc / runc (CVE-2024-45310)

The version of cri-tools / moby-runc / runc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45310 advisory. - runc is a CLI tool for spawning and running containers according to the OCI...

CVE-2025-22869 affecting package moby-engine for versions less than 25.0.3-11

CVE-2025-22869 affecting package moby-engine for versions less than 25.0.3-11. A patched version of the package is available...

CVE-2025-22868 affecting package moby-engine for versions less than 25.0.3-11

CVE-2025-22868 affecting package moby-engine for versions less than 25.0.3-11. A patched version of the package is available...

Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps

Summary Multiple vulnerabilities were fixed in IBM Cloud Pak for Watson AIOps version 4.1.1 Vulnerability Details CVEID:CVE-2023-26920 DESCRIPTION: Natural Intelligence fast-xml-parser could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw in t...

Security Bulletin: IBM Cloud Pak for Network Automation 2.4.7 fixes multiple security vulnerabilities

Summary IBM Cloud Pak for Network Automation 2.4.7 fixes multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2023-24538 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary code on the system, caused by the failure to properly consider...

CVE-2025-22868 affecting package moby-engine for versions less than 24.0.9-15

CVE-2025-22868 affecting package moby-engine for versions less than 24.0.9-15. A patched version of the package is available...

CVE-2025-22869 affecting package moby-engine for versions less than 24.0.9-15

CVE-2025-22869 affecting package moby-engine for versions less than 24.0.9-15. A patched version of the package is available...

AZL-59217 CVE-2025-30204 affecting package moby-engine for versions less than 24.0.9-16

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-59180 CVE-2025-30204 affecting package moby-engine for versions less than 25.0.3-12

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-58854 CVE-2025-0495 affecting package moby-buildx for versions less than 0.7.1-25

Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values in cache-to/cache-from configuration. When supplied as user input, these secure values may be inadvertently captured in OpenTelemetry...

CVE-2025-22869 affecting package moby-compose for versions less than 2.17.3-10

CVE-2025-22869 affecting package moby-compose for versions less than 2.17.3-10. A patched version of the package is available...

CVE-2025-27144 affecting package moby-containerd for versions less than 1.6.26-10

CVE-2025-27144 affecting package moby-containerd for versions less than 1.6.26-10. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2023-28841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream...