263 matches found
CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume
CVE-2026-5555 – Container Escape via /proc/self/fd Symlink Overview A shared volume mounted with rshared propagation allows a malicious container to create a symbolic link pointing to a host file through /proc/self/fd. The host process writing to the volume follows the symlink, overwriting critic...
CVE-2026-45699
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...
CVE-2026-50284 Craft CMS: Missing peer-permission check in `AssetsController::actionDeleteFolder` allows deletion of other users' assets
Craft CMS is a content management system CMS. In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder only requires the deleteAssets: permission for the target folder. It never enforces deletePeerAssets:, even though Assets::deleteFoldersByIds...
CVE-2026-50568
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, SanitizeFilePath in pkg/utils/utils.go validated that a path stayed under a safe directory by calling strings.HasPrefixpath,...
Fission security vulnerabilities
Fission is an open-source function deployment framework based on Kubernetes. Versions of Fission prior to 1.25.0 contain security vulnerabilities. These vulnerabilities stem from the SanitizeFilePath function, which uses string prefix checks instead of directory boundary checks. As a result,...
PT-2026-48513
Name of the Vulnerable Software and Affected Versions Fission versions prior to 1.25.0 Description Fission is a Kubernetes-native serverless framework. The SanitizeFilePath function in pkg/utils/utils.go performs a lexical check using strings.HasPrefixpath, safedir to ensure a path remains within...
Fission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables
Summary Before the round-1 security sweep, pkg/builder/builder.go passed Environment.spec.builder.command directly into exec.Command... after a strings.Fields split, with no validation of the executable path or its arguments. A user who could create or update Environment CRDs in a namespace...
PT-2026-42605
Summary Before the round-1 security sweep, pkg/builder/builder.go passed Environment.spec.builder.command directly into exec.Command... after a strings.Fields split, with no validation of the executable path or its arguments. A user who could create or update Environment CRDs in a namespace...
EUVD-2022-33548
Malicious code in bioql PyPI...
EUVD-2022-33532
Malicious code in bioql PyPI...
EUVD-2022-33530
Malicious code in bioql PyPI...
EUVD-2022-33533
Malicious code in bioql PyPI...
EUVD-2022-33544
Malicious code in bioql PyPI...
EUVD-2022-33560
Malicious code in bioql PyPI...
EUVD-2022-31334
Malicious code in bioql PyPI...
EUVD-2022-33545
Malicious code in bioql PyPI...
EUVD-2022-29418
Malicious code in bioql PyPI...
EUVD-2022-33559
Malicious code in bioql PyPI...
EUVD-2022-29365
Malicious code in bioql PyPI...
Description of the System Center Virtual Machine Manager 2008 R2 SP1 hotfix rollup package: July 12, 2011
Description of the System Center Virtual Machine Manager 2008 R2 SP1 hotfix rollup package: July 12, 2011 Applies To Microsoft System Center Virtual Machine Manager 2008 R2 Service Pack 1 INTRODUCTION This article describes the Microsoft System Center Virtual Machine Manager 2008 R2 SCVMM 2008 R2...