9748 matches found
CVE-2024-40635 containerd has an integer overflow in User ID handling
containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...
CVE-2024-40635
CVE-2024-40635 affects containerd. A bug allows containers launched with a UID:GID that exceeds the 32‑bit signed integer max to overflow, causing the container to run as root (UID 0). Fixed in containerd releases: 1.6.38, 1.7.27, and 2.0.4. Workarounds include using only trusted images and restr...
GHSA-265R-HFXG-FHMG containerd has an integer overflow in User ID handling
Impact A bug was found in containerd where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root UID 0. This could cause unexpected behavior for environments that require container...
containerd has an integer overflow in User ID handling
Impact A bug was found in containerd where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root UID 0. This could cause unexpected behavior for environments that require container...
libtpms bug fix and enhancement update
An update is available for libtpms. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtpms is a library providing Trusted Platform Module TPM functionality...
RLSA-2024:9424 Low: tpm2-tools security update
The tpm2-tools packages add a set of utilities for management and utilization of Trusted Platform Module TPM 2.0 devices from user space. Security Fixes: tpm2-tools: arbitrary quote data may go undetected by tpm2checkquote CVE-2024-29038 tpm2-tools: pcr selection value is not compared with the...
tpm2-tools security update
An update is available for tpm2-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tpm2-tools packages add a set of utilities for management and...
PT-2025-11557
Name of the Vulnerable Software and Affected Versions containerd versions prior to 1.6.38 containerd versions prior to 1.7.27 containerd versions prior to 2.0.4 Description A bug was found in containerd where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed...
The vulnerability of the Trusted Execution Environment (TEE) for the deployment of Intel Trust Domain Extensions (Intel TDX) allows a perpetrator to exploit their privileges by exploiting incomplete filtering of special elements.
The vulnerability of the Trusted Execution Environment TEE for the deployment of Intel Trust Domain Extensions virtual machines is related to incomplete filtering of special elements. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Moderate: Red Hat Security Advisory: krb5 security update
An update for krb5 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
CVE-2025-27407
A flaw was found in graphql-ruby. In affected versions of graphq-ruby, loading a malicious schema definition in the GraphQL::Schema.fromintrospection or the GraphQL::Schema::Loader.load can cause remote code execution. Any system that loads a schema by JSON from an untrusted source is vulnerable,...
tpm: Change to kvalloc() in eventlog/acpi.c
...
CVE-2025-0115 PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI
A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface web, SSH, console, or telnet and successfully authenticate to exploit this issue. You can greatly...
CVE-2025-0813
creationtimestamp| type| source ---|---|--- 2025-03-12 15:40:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7322 2025-03-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-077-01...
GHSA-48G7-3X6R-XFHP Arbitrary Code Execution via Crafted Keras Config for Model Loading
Impact The Keras Model.loadmodel function permits arbitrary code execution, even with safemode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their...
Arbitrary Code Execution via Crafted Keras Config for Model Loading
Impact The Keras Model.loadmodel function permits arbitrary code execution, even with safemode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their...
CVE-2025-1550
A flaw was found in Keras. This vulnerability allows arbitrary code execution via a maliciously crafted .keras archive that manipulates the config.json file to load and execute arbitrary Python modules and functions, even with safemode=True. Mitigation In order to reduce the success of the attack...
PT-2025-10719
Name of the Vulnerable Software and Affected Versions Keras versions 3.0.0 through 3.7.9 Description The Keras Model.load model function allows for arbitrary code execution, even when safe mode is enabled. This occurs through a maliciously crafted .keras archive. An attacker can modify the...
