Lucene search
K

434 matches found

Openbugbounty
Openbugbounty
added 2022/12/09 5:33 a.m.15 views

singularity-app.ru Cross Site Scripting vulnerability OBB-3091820

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
CNVD
CNVD
added 2022/10/10 12:0 a.m.27 views

Singularity Image Format Encryption Problem Vulnerability

Singularity Image Format is a compressed squashfs file system from Singularity that has a block organization structure, including metadata and definition files for containers, first labels, partition contents, signatures if they exist, and, of course, the containers for the binaries themselves...

9.8CVSS2.1AI score0.00252EPSS
Exploits0References1
OSV
OSV
added 2022/10/06 6:16 p.m.1 views

DEBIAN-CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS6.2AI score0.00252EPSS
Exploits0References1
OSV
OSV
added 2022/10/06 6:16 p.m.0 views

UBUNTU-CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS6.4AI score0.00252EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2022/10/06 6:16 p.m.34 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS6.5AI score0.00252EPSS
Exploits0References5
Prion
Prion
added 2022/10/06 6:16 p.m.23 views

Design/Logic Flaw

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

7.5CVSS9.4AI score0.00252EPSS
Exploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2022/10/06 12:0 a.m.23 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS7.9AI score0.00252EPSS
Exploits0
CNNVD
CNNVD
added 2022/10/06 12:0 a.m.1 views

Singularity Image Format 加密问题漏洞

Singularity Image Format is a compressed squashfs file system from Singularity that has a block organization structure, including metadata and definition files for containers, first labels, partition contents, signatures if they exist, and, of course, the containers for the binaries themselves...

9.8CVSS6.8AI score0.00252EPSS
Exploits0References6
CVE
CVE
added 2022/10/06 12:0 a.m.91 views

CVE-2022-39237

CVE-2022-39237 affects the Syslabs/sif (Singularity Image Format) reference implementation. In versions prior to 2.8.1, the go module github.com/sylabs/sif/v2/pkg/integrity did not verify that the hash algorithms used for metadata digests and signatures are cryptographically secure when validatin...

9.8CVSS7.8AI score0.00252EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2022/10/06 12:0 a.m.34 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS6.7AI score0.00252EPSS
Exploits0
OSV
OSV
added 2022/10/06 12:0 a.m.26 views

CVE-2022-39237 Digital Signature Hash Algorithms Not Validated in sylabs/sif

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

6.3CVSS5.5AI score0.00252EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/07/21 12:0 a.m.8 views

Fedora: Security Advisory for singularity (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2022/07/20 1:40 a.m.16 views

[SECURITY] Fedora 35 Update: singularity-3.8.7-2.fc35

Singularity provides functionality to make portable containers that can be used across host environments...

2.8AI score
Exploits0
OpenVAS
OpenVAS
added 2022/07/14 12:0 a.m.24 views

Fedora: Security Advisory for singularity (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.00963EPSS
Exploits4References2
Fedora
Fedora
added 2022/07/13 2:0 a.m.31 views

[SECURITY] Fedora 36 Update: singularity-3.8.7-2.fc36

Singularity provides functionality to make portable containers that can be used across host environments...

9.3CVSS2.8AI score0.00963EPSS
Exploits4
Github Security Blog
Github Security Blog
added 2022/05/24 5:4 p.m.30 views

Singularity insecure permissions

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

7.5CVSS6.6AI score0.00313EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/05/24 5:4 p.m.19 views

GHSA-MJ73-5X75-9PHH Singularity insecure permissions

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

7.5CVSS7.4AI score0.00313EPSS
Exploits0References6
OSV
OSV
added 2022/05/14 1:39 a.m.20 views

GHSA-P83V-8VMR-QFV9 Sylabs Singularity Improper Input Validation

Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks...

7.8CVSS7.4AI score0.00119EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/05/14 1:1 a.m.10 views

Singularity Incorrect Access Control

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features...

6.8CVSS6.6AI score0.00427EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/05/14 1:1 a.m.14 views

GHSA-4X32-H296-RG6J Singularity Incorrect Access Control

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features...

6.5CVSS6.4AI score0.00427EPSS
Exploits0References4
Rows per page
Query Builder