Docker vulnerabilities

Latest Docker CVEs

Newest publication first · page 32 of 40 · showing the latest 1,000

1. CVE-2024-29018 External DNS requests from 'internal' networks could lead to data exfiltration

   Published 2024-03-20

   High·CVSS 7.5 EPSS 0.74%

   Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be define...

2. GHSA-4jhj-3gv3-c3gr CLI for Vela Insecure Variable Substitution

   Published 2024-03-15

   High·CVSS 7.7

   Impact Vela pipelines can use variable substitution combined with insensitive fields like parameters, image and entrypoint to inject secrets into a plugin/image and — by using common substitution string manipulation — can bypass log masking and expose secrets without the use of t...

3. GHSA-v8mx-hp2q-gw85 Golang SDK for Vela Insecure Variable Substitution

   Published 2024-03-15

   High·CVSS 7.7

   Impact Vela pipelines can use variable substitution combined with insensitive fields like parameters, image and entrypoint to inject secrets into a plugin/image and — by using common substitution string manipulation — can bypass log masking and expose secrets without the use of t...

4. GHSA-69p4-j5v5-x234 Server/API for Vela Insecure Variable Substitution

   Published 2024-03-15

   High·CVSS 7.7

   Impact Vela pipelines can use variable substitution combined with insensitive fields like parameters, image and entrypoint to inject secrets into a plugin/image and — by using common substitution string manipulation — can bypass log masking and expose secrets without the use of t...

5. GHSA-7v38-w32m-wx4m Types for Vela Insecure Variable Substitution

   Published 2024-03-15

   High·CVSS 7.7

   Impact Vela pipelines can use variable substitution combined with insensitive fields like parameters, image and entrypoint to inject secrets into a plugin/image and — by using common substitution string manipulation — can bypass log masking and expose secrets without the use of t...

6. CVE-2024-24562 Security headers not set in vantage6-UI

   Published 2024-03-14

   Medium·CVSS 5.3 EPSS 0.35%

   vantage6-UI is the official user interface for the vantage6 server. In affected versions a number of security headers are not set. This issue has been addressed in commit 68dfa6614 which is expected to be included in future releases. Users are advised to upgrade when a new releas...

7. CVE-2024-28236 Insecure Variable Substitution in Vela

   Published 2024-03-12

   Medium·CVSS 6.5 EPSS 0.72%

   Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Vela pipelines can use variable substitution combined with insensitive fields like parameters, image and entrypoint to inject secrets into a plugin/image and — by using common s...

8. CVE-2024-2216 Jenkins docker-build-step Plugin missing permission check

   Published 2024-03-06

   High·CVSS 8.8 EPSS 0.83%

   A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameter...

9. CVE-2024-2215 Jenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability

   Published 2024-03-06

   Medium·CVSS 6.1 EPSS 0.41%

   A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build...

10. CVE-2023-51518 Apache James server: Privilege escalation via JMX pre-authentication deserialisation

    Published 2024-02-27

    Critical·CVSS 9.8 EPSS 1.2%

    Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note t...

11. CVE-2024-1355 Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

    Published 2024-02-13

    Critical·CVSS 9.1 EPSS 2.4%

    A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the actions-console docker container while setting a service URL. Exploitation of this...

12. CVE-2024-23756 The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or...

    Published 2024-02-08

    High·CVSS 7.5 EPSS 0.60%

    The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them.

13. CVE-2023-38369 IBM Security Access Manager Container information disclosure

    Published 2024-02-07

    High·CVSS 7.5 EPSS 0.53%

    IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 261196.

14. CVE-2024-23054 An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public p...

    Published 2024-02-05

    Critical·CVSS 9.8 EPSS 1.3%

    An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).

15. CVE-2023-31006 IBM Security Access Manager Container denial of service

    Published 2024-02-03

    High·CVSS 7.5 EPSS 0.89%

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to a denial of service attacks on the DSC server. IBM X-Force ID: 254776.

16. CVE-2023-31004 IBM Security Access Manager Container gain access

    Published 2024-02-03

    Critical·CVSS 9.0 EPSS 0.99%

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote attacker to gain access to the underlying system using man in the middle techniques. IBM X-F...

17. CVE-2023-32329 IBM Security Access Manager Container improper file validation

    Published 2024-02-03

    Medium·CVSS 5.5 EPSS 0.16%

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a user to download files from an incorrect repository due to improper file validation. IBM X-Force ID...

18. CVE-2023-32327 IBM Security Access Manager Container XML external entity injection

    Published 2024-02-03

    High·CVSS 7.1 EPSS 0.96%

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could...

19. CVE-2023-43016 IBM Security Access Manager Container unauthorized access

    Published 2024-02-03

    High·CVSS 7.3 EPSS 0.71%

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 26...

20. CVE-2023-30999 IBM Security Access Manager denial of service

    Published 2024-02-03

    High·CVSS 7.5 EPSS 1.0%

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 25...

21. CVE-2023-31005 IBM Security Access Manager Container privilege escalation

    Published 2024-02-03

    High·CVSS 7.8 EPSS 0.23%

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a local user to escalate their privileges due to an improper security configuration. IBM X-Force ID:...

22. GHSA-g5p6-327m-3fxx Talos Linux ships runc vulnerable to the escape to the host attack

    Published 2024-02-02

    High·CVSS 8.6

    Impact Snyk has discovered a vulnerability in all versions of runc <=1.1.11, as used by the Docker engine, along with other containerization technologies such as Kubernetes. Exploitation of this issue can result in container escape to the underlying host OS, either through execut...

23. CVE-2024-24760 Mailcow Docker Container Exposure to Local Network

    Published 2024-02-02

    High·CVSS 7.3 EPSS 0.87%

    mailcow is a dockerized email package, with multiple containers linked in one bridged network. A security vulnerability has been identified in mailcow affecting versions < 2024-01c. This vulnerability potentially allows attackers on the same subnet to connect to exposed ports of...

24. CVE-2024-24756 Crafatar path traversal vulnerability

    Published 2024-02-01

    High·CVSS 7.5 EPSS 0.87%

    Crafatar serves Minecraft avatars based on the skin for use in external applications. Files outside of the lib/public/ directory can be requested from the server. Instances running behind Cloudflare (including crafatar.com) are not affected. Instances using the Docker container a...

25. CVE-2024-24557 Moby classic builder cache poisoning

    Published 2024-02-01

    High·CVSS 7.8 EPSS 0.26%

    Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions (most important being HEALTHCHECK and ONBUILD) would not cause...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.