Vulnerability search

Batch lookup →

Active filters:linuxfoundation clear all

158 matches

CVE

Title

Severity

CVE-2024-21626
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc4 sources· osv_advisory · cve
highEPSS 18%
107.7
8.6
97.0%
2024-06-28 15:28 UTC
CVE-2026-33701
OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution3 sources· cve · osv_advisory
criticalEPSS 0.9%
103.3
9.8
57.8%
2026-03-27 01:16 UTC
CVE-2026-24747
PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files5 sources· osv_advisory · cve
highEPSS 0.7%
103.1
8.8
50.8%
2026-07-07 16:03 UTC
CVE-2019-5736
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to…
highEPSS 98%
103.0
8.6
99.9%
2019-02-11 00:00 UTC
CVE-2026-44477
CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE in…5 sources· osv_advisory · cve · euvd_advisory
criticalEPSS 0.5%
102.3
9.9
39.5%
2026-06-25 18:26 UTC
CVE-2026-35171
Kedro has Arbitrary Code Execution via Malicious Logging Configuration4 sources· osv_advisory · cve
criticalEPSS 0.7%
101.3
9.8
51.4%
2026-04-06 18:16 UTC
CVE-2026-33211
Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline5 sources· bsi_warning · osv_advisory · cve
criticalEPSS 0.6%
100.8
9.6
45.1%
2026-05-29 10:25 UTC
CVE-2026-40938
Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline6 sources· osv_advisory · bsi_warning · cve …
highEPSS 0.8%
98.5
8.5
53.8%
2026-06-25 18:43 UTC
CVE-2024-24421
A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit…2 sources· cve
criticalEPSS 0.9%
92.5
9.8
59.0%
2025-01-21 23:15 UTC
CVE-2026-27489
onnx Vulnerable to Path Traversal via Symlink4 sources· cve · osv_advisory
highEPSS 0.6%
91.7
7.5
46.0%
2026-04-01 18:16 UTC
CVE-2026-50151
Oras-go: Blob upload vulnerable to credential forwarding via unvalidated Location header in…3 sources· osv_advisory · cve
highEPSS 0.4%
90.7
7.5
31.4%
2026-07-24 18:35 UTC
CVE-2026-29785
NATS Server panic via malicious compression on leafnode port in github.com/nats-io/nats-server5 sources· bsi_warning · osv_advisory · cve
highEPSS 0.7%
90.5
7.5
49.4%
2026-06-02 07:37 UTC
CVE-2026-58207
NATS Server: Remote crash via integer overflow in Connz pagination3 sources· msrc_update_guide · cve
highEPSS 0.6%
90.0
7.7
44.8%
2026-07-11 01:07 UTC
CVE-2026-34045
Podman Desktop is a graphical tool for developing on containers and Kubernetes.2 sources· cve
criticalEPSS 0.5%
89.4
9.1
39.1%
2026-04-07 21:17 UTC
CVE-2026-29186
TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution3 sources· cve · osv_advisory
criticalEPSS 0.8%
89.1
9.8
53.5%
2026-03-07 15:15 UTC
CVE-2026-58208
NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is…3 sources· cve · msrc_update_guide
mediumEPSS 0.6%
86.9
6.8
46.8%
2026-07-11 01:08 UTC
CVE-2026-33218
NATS has pre-auth server panic via leafnode handling in github.com/nats-io/nats-server4 sources· osv_advisory · cve
highEPSS 0.6%
85.9
7.5
47.5%
2026-03-26 20:33 UTC
CVE-2026-27889
NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead4 sources· osv_advisory · cve
highEPSS 0.6%
84.7
7.5
45.9%
2026-03-26 20:33 UTC
CVE-2026-25153
@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks3 sources· osv_advisory · cve
highEPSS 0.6%
81.4
8.8
44.9%
2026-02-02 20:19 UTC
CVE-2026-33216
NATS has MQTT plaintext password disclosure in github.com/nats-io/nats-server4 sources· osv_advisory · cve
highEPSS 0.4%
81.1
8.6
29.8%
2026-03-26 20:33 UTC
CVE-2023-52724
Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the…2 sources· cve
highEPSS 0.9%
80.2
8.1
57.0%
2024-04-30 00:15 UTC
CVE-2026-65918
PyTorch: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen3 sources· cve · bsi_warning
highEPSS 0.3%
80.0
7.1
25.7%
2026-07-24 09:27 UTC
CVE-2026-33247
NATS credentials are exposed in monitoring port via command-line argv in…4 sources· osv_advisory · cve
highEPSS 0.4%
77.9
7.4
34.8%
2026-03-26 20:33 UTC
CVE-2026-28500
ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent…4 sources· cve · osv_advisory
criticalEPSS 0.3%
77.6
9.1
24.1%
2026-03-18 02:16 UTC
CVE-2026-49835
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps.2 sources· cve
highEPSS 0.4%
77.6
7.5
37.6%
2026-07-17 19:17 UTC