Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
docker vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2021-34079
OS Command injection vulnerability in Mintzo Docker-Tester up to and including 1.2.1 allows malicious users to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.
Docker-tester Project Docker-tester
9.8
CVSSv3
CVE-2020-29389
The official Crux Linux Docker images 3.0 up to and including 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affected versions of the Docker image may allow an malicious user to achieve root access with a blank password.
Docker Crux Linux Docker Image
9.8
CVSSv3
CVE-2020-29575
The official elixir Docker images prior to 1.8.0-alpine (Alpine specific) contain a blank password for a root user. Systems using the elixir Linux Docker container deployed by affected versions of the Docker image may allow a remote malicious user to achieve root access with a bl...
Docker Elixir Alpine Docker Image
9.8
CVSSv3
CVE-2020-29581
The official spiped docker images prior to 1.5-alpine contain a blank password for a root user. Systems using the spiped docker container deployed by affected versions of the docker image may allow an remote malicious user to achieve root access with a blank password.
Docker Spiped Alpine Docker Image
7.5
CVSSv3
CVE-2023-1802
In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed. A targeted network sniffing attack can lead to a disclosure of sensitive information. Only users who have Access Experimental Feat...
Docker Desktop 4.17.0
Docker Desktop 4.17.1
9.8
CVSSv3
CVE-2023-34844
Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.
Play With Docker Project Play With Docker
9.8
CVSSv3
CVE-2020-29578
The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote malicious user to achieve root access.
Matomo Piwik Fpm-alpine Docker Image 3
Matomo Piwik Fpm-alpine Docker Image 3.5
Matomo Piwik Fpm-alpine Docker Image 3.5.1
Matomo Piwik Fpm-alpine Docker Image 3.6
Matomo Piwik Fpm-alpine Docker Image 3.6.0
8.8
CVSSv3
CVE-2020-14300
The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053) included an incorrect version of runc that was missing multiple bug and security fixes. One of the f...
Redhat Enterprise Linux Server 7.0
Docker Docker 1.13.1
9.8
CVSSv3
CVE-2020-7606
docker-compose-remote-api up to and including 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by...
Docker-compose-remote-api Project Docker-compose-remote-api
9.8
CVSSv3
CVE-2020-35191
The official drupal docker images prior to 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user. System using the drupal docker container deployed by affected versions of the docker image may allow a remote malicious user to achieve root access with a blan...
Drupal Drupal Docker Images 8.3.0-fpm-alpine
Drupal Drupal Docker Images
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-33545
CVE-2024-35725
CVE-2024-32704
overflow
file upload
CVE-2024-0230
CVE-2024-32705
CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »