Lucene search
+L

1397 matches found

osv_debian
osv_debian
•added 2026/03/31 3:15 a.m.•15 views

DEBIAN-CVE-2026-33997

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

8.1CVSS6.8AI score0.00387EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/03/31 3:15 a.m.•66 views

UBUNTU-CVE-2026-33997

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

8.4CVSS6.8AI score0.00387EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/03/31 3:15 a.m.•12 views

CVE-2026-33997

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

8.4CVSS5.7AI score0.00387EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/03/31 3:15 a.m.•20 views

CVE-2026-34040

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins AuthZ. This issue has been patched in version 29.3.1...

8.8CVSS7.5AI score0.09113EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2026/03/31 3:15 a.m.•16 views

UBUNTU-CVE-2026-34040

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins AuthZ. This issue has been patched in version 29.3.1...

8.8CVSS7.5AI score0.09113EPSS
SaveExploits1References4
CVE
CVE
•added 2026/03/31 1:36 a.m.•142 views

CVE-2026-33997

CVE-2026-33997 affects Moby (docker) prior to 29.3.1. A daemon privilege-validation check is flawed, potentially allowing a privilege set that differs from the user-approved one to be accepted during docker plugin installation. Plugins requesting exactly one privilege are also affected because th...

8.4CVSS6.8AI score0.00387EPSS
SaveExploits0References8Affected Software1
osv_cve
osv_cve
•added 2026/03/31 1:36 a.m.•23 views

CVE-2026-33997 Moby: Off-by-one error in plugin privilege validation

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

6.8CVSS5.7AI score
SaveExploits0References10
Debian CVE
Debian CVE
•added 2026/03/31 1:36 a.m.•24 views

CVE-2026-33997

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

8.4CVSS6.8AI score0.00387EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/03/31 1:36 a.m.•29 views

CVE-2026-33997 Moby: Off-by-one error in plugin privilege validation

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

6.8CVSS6.8AI score0.00387EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/31 1:36 a.m.•18 views

CVE-2026-33997

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

8.4CVSS5.7AI score0.00387EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/03/31 1:36 a.m.•64 views

CVE-2026-33997 Moby: Off-by-one error in plugin privilege validation

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

6.8CVSS0.00387EPSS
SaveExploits0References2
Mend
Mend
•added 2026/03/31 1:36 a.m.•5 views

CVE-2026-33997

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

8.4CVSS6.8AI score0.00387EPSS
SaveExploits0References13
AlpineLinux
AlpineLinux
•added 2026/03/31 1:36 a.m.•22 views

CVE-2026-33997

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a...

8.4CVSS6.8AI score0.00387EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/03/31 1:36 a.m.•19 views

CVE-2026-34040

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins AuthZ. This issue has been patched in version 29.3.1...

8.8CVSS7.4AI score0.09113EPSS
SaveExploits1
osv_cve
osv_cve
•added 2026/03/31 1:36 a.m.•26 views

CVE-2026-34040 Moby: AuthZ plugin bypass with oversized request body

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins AuthZ. This issue has been patched in version 29.3.1...

8.8CVSS7.5AI score0.09113EPSS
SaveExploits1References4
CVE
CVE
•added 2026/03/31 1:36 a.m.•171 views

CVE-2026-34040

CVE-2026-34040 affects Moby, the open source container framework. Prior to version 29.3.1, an issue allows bypassing authorization plugins (AuthZ). The vulnerability has been fixed in 29.3.1. Connected sources consistently describe the problem as an AuthZ bypass in the daemon/plugin authorization...

8.8CVSS7.4AI score0.09113EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/31 1:36 a.m.•24 views

CVE-2026-34040 Moby: AuthZ plugin bypass with oversized request body

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins AuthZ. This issue has been patched in version 29.3.1...

8.8CVSS7.4AI score0.09113EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/03/31 1:36 a.m.•14 views

CVE-2026-34040

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins AuthZ. This issue has been patched in version 29.3.1...

8.8CVSS7.7AI score0.09113EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2026/03/31 1:36 a.m.•44 views

CVE-2026-34040 Moby: AuthZ plugin bypass with oversized request body

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins AuthZ. This issue has been patched in version 29.3.1...

8.8CVSS0.09113EPSS
SaveExploits1References2
Mend
Mend
•added 2026/03/31 1:36 a.m.•5 views

CVE-2026-34040

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins AuthZ. This issue has been patched in version 29.3.1...

9.3CVSS7.4AI score0.09113EPSS
SaveExploits1References8
Rows per page
Query Builder