Lucene search
K

8 matches found

OSV
OSV
added 2020/02/10 1:15 a.m.13 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

8.1CVSS7AI score
Exploits0References1
OSV
OSV
added 2020/02/10 1:15 a.m.3 views

DEBIAN-CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

8.1CVSS7.9AI score0.01316EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2020/02/10 1:15 a.m.37 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS7.2AI score0.01316EPSS
Exploits0References3
Prion
Prion
added 2020/02/10 1:15 a.m.14 views

Code injection

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS8AI score0.01316EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/02/10 12:30 a.m.114 views

CVE-2017-18641

CVE-2017-18641 affects LXC 2.0: template scripts fetch code over cleartext HTTP and skip a digital-signature check before bootstrapping containers. Root cause is lack of integrity/authenticity verification during bootstrapping. The connected Red Hat and Ubuntu entries corroborate the same descrip...

9.3CVSS8AI score0.01316EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/02/10 12:30 a.m.21 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

8.1AI score0.01316EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2020/02/10 12:30 a.m.16 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS8.1AI score0.01316EPSS
Exploits0
Packet Storm
Packet Storm
added 2011/03/03 12:0 a.m.17 views

Tribiq CMS 5.2.7b Path Disclosure

Vulnerability ID: HTB22857 Reference: http://www.htbridge.ch/advisory/fullpathdisclosureintribiqcms.html Product: Tribiq CMS Vendor: Tribal Limited http://tribiq.com/ Vulnerable Version: 5.2.7b and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure...

Exploits0
Rows per page
Query Builder