Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Docker Desktop
HIGH 7.8
Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking…
Docker Desktop
HIGH 8.4
Docker Desktop 4.3.0 has Incorrect Access Control.
Docker Desktop
HIGH 7.1
Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink i…
Docker
HIGH 7.8
Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23…
Docker Desktop
MEDIUM 5.3
Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files.
Docker Desktop
MEDIUM 5.5
Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. Th…
Command Line Interface
HIGH 7.5
Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-r…
Desktop
HIGH 7.8
Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows conta…
Docker
MEDIUM 6.5
In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the doc…
Docker
MEDIUM 6.8
In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privi…
Docker
HIGH 7.8
Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation.
Docker
MEDIUM 5.3
util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, const…
Haproxy Docker Image
CRITICAL 9.8
The official haproxy docker images before 1.8.18-alpine (Alpine specific) contain a blank password for a root user. System using the haproxy docker c…
Rabbitmq Docker Image
CRITICAL 9.8
The official rabbitmq docker images before 3.7.13-beta.1-management-alpine (Alpine specific) contain a blank password for a root user. System using t…
Memcached Docker Image
CRITICAL 9.8
The official memcached docker images before 1.5.11-alpine (Alpine specific) contain a blank password for a root user. System using the memcached dock…
Composer Docker Image
CRITICAL 9.8
The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deployed by aff…
Adminer
CRITICAL 9.8
The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed …
Ghost Alpine Docker Image
CRITICAL 9.8
The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System using the ghost docker conta…
Docs
CRITICAL 9.8
The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker D…
Registry
CRITICAL 9.8
Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of…
Storm Docker Image
CRITICAL 9.8
The official storm Docker images before 1.2.1 contain a blank password for a root user. Systems using the Storm Docker container deployed by affected…
Spiped Alpine Docker Image
CRITICAL 9.8
The official spiped docker images before 1.5-alpine contain a blank password for a root user. Systems using the spiped docker container deployed by a…
Notary Docker Image
CRITICAL 9.8
The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. System using the notary docker container deployed b…
Elixir Alpine Docker Image
CRITICAL 9.8
The official elixir Docker images before 1.8.0-alpine (Alpine specific) contain a blank password for a root user. Systems using the elixir Linux Dock…
Crux Linux Docker Image
CRITICAL 9.8
The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed…
Docker
HIGH 8.8
The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.red…
Docker
HIGH 8.8
The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the…
Docker Desktop
HIGH 7.8
com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification.
Docker Desktop
HIGH 7.8
An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with …
Engine
MEDIUM 6.0
An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertis…