anchore records

9 published records for vendor anchore.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 88.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-11075No exploit	Shell Escape in Anchore Engineanchore · engine · CWE-114	Critical9.9	—	1.8%	May 27, 2020
39Monitor	CVE-2024-24579No exploit	Tar path traversal in stereoscope when processing OCI tar archivesanchore · stereoscope · CWE-22 Pre-auth Path traversal	Critical9.8	—	0.4%	Jan 31, 2024
30Monitor	CVE-2023-24827No exploit	Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syftanchore · syft · CWE-200 Pre-auth Info leak	High7.5	—	0.8%	Feb 6, 2023
30Monitor	CVE-2022-1766No exploit	Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials.anchore · anchore · CWE-522 Pre-auth Info leak	High7.5	—	0.7%	Jul 20, 2022
26Monitor	CVE-2018-1999033No exploit	An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilanchore · container image scanner · CWE-200 Info leak	Medium6.5	—	0.9%	Aug 1, 2018
22Monitor	CVE-2026-31961No exploit	Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsinganchore · quill · CWE-770 Denial of service	Medium5.5	—	0.1%	Mar 11, 2026
21Monitor	CVE-2026-33481No exploit	Syft improper temporary file cleanupanchore · syft · CWE-460 Pre-auth Denial of service	Medium5.3	—	0.5%	Mar 26, 2026
21Monitor	CVE-2026-31960No exploit	DoS in Quill via unbounded read of HTTP response body during notarizationanchore · quill · CWE-770 Pre-auth Denial of service	Medium5.3	—	0.1%	Mar 11, 2026
21Monitor	CVE-2026-31959No exploit	SSRF in Quill via unvalidated URL from Apple notarization log retrievalanchore · quill · CWE-918 Pre-auth SSRF	Medium5.3	—	0.1%	Mar 11, 2026

CVE-2020-11075
40Plan
Shell Escape in Anchore Engine
CriticalCVSS 9.9No exploitEPSS 2%
anchore · engineMay 27, 2020
CVE-2024-24579
39Monitor
Tar path traversal in stereoscope when processing OCI tar archives
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Path traversal
anchore · stereoscopeJan 31, 2024
CVE-2023-24827
30Monitor
Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syft
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
anchore · syftFeb 6, 2023
CVE-2022-1766
30Monitor
Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
anchore · anchoreJul 20, 2022
CVE-2018-1999033
26Monitor
An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuil
MediumCVSS 6.5No exploitEPSS 1%
- Info leak
anchore · container image scannerAug 1, 2018
CVE-2026-31961
22Monitor
Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
anchore · quillMar 11, 2026
CVE-2026-33481
21Monitor
Syft improper temporary file cleanup
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Denial of service
anchore · syftMar 26, 2026
CVE-2026-31960
21Monitor
DoS in Quill via unbounded read of HTTP response body during notarization
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Denial of service
anchore · quillMar 11, 2026
CVE-2026-31959
21Monitor
SSRF in Quill via unvalidated URL from Apple notarization log retrieval
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- SSRF
anchore · quillMar 11, 2026