Skip to content
Noroxi

Docker records

115 published records for vendor docker.

Researcher profile

Entered KEV
1 · 0.9%
Weaponized
2 · 1.7%
Pre-auth RCE
8
With a fix record
60%
Median publish → KEV
798 days

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

115 records
  • CVE-2019-15752
    76This week

    Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.ex

    HighCVSS 7.8KEVWeaponizedEPSS 49%

    docker · dockerAug 28, 2019

  • CVE-2019-5736
    64This week

    runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequen

    HighCVSS 8.6WeaponizedEPSS 98%

    docker · dockerFeb 11, 2019

  • CVE-2019-14271
    45Plan

    In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamical

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    docker · dockerJul 29, 2019

  • CVE-2024-41110
    44Plan

    Moby authz zero length regression

    CriticalCVSS 9.9Proof of conceptEPSS 16%

    moby · mobyJul 24, 2024

  • CVE-2014-9357
    42Plan

    Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in

    CriticalCVSS 10.0No exploitEPSS 6%

    docker · dockerDec 16, 2014

  • CVE-2014-0048
    41Plan

    An issue was found in Docker before 1.6.0.

    CriticalCVSS 9.8No exploitEPSS 7%

    docker · dockerJan 2, 2020

  • CVE-2020-35184
    40Plan

    The official composer docker images before 1.8.3 contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 3%

    docker · composer docker imageDec 16, 2020

  • CVE-2020-29575
    40Plan

    The official elixir Docker images before 1.8.0-alpine (Alpine specific) contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 3%

    docker · elixir alpine docker imageDec 8, 2020

  • CVE-2020-35186
    40Plan

    The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 3%

    docker · adminerDec 16, 2020

  • CVE-2020-35185
    40Plan

    The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 3%

    docker · ghost alpine docker imageDec 16, 2020

  • CVE-2020-29591
    40Plan

    Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user.

    CriticalCVSS 9.8No exploitEPSS 3%

    docker · registryDec 11, 2020

  • CVE-2020-29580
    40Plan

    The official storm Docker images before 1.2.1 contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    docker · storm docker imageDec 8, 2020

  • CVE-2020-29601
    40Plan

    The official notary docker images before signer-0.6.1-1 contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    docker · notary docker imageDec 8, 2020

  • CVE-2020-29581
    40Plan

    The official spiped docker images before 1.5-alpine contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    docker · spiped alpine docker imageDec 8, 2020

  • CVE-2020-35467
    40Plan

    The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    docker · docsDec 15, 2020

  • CVE-2020-35195
    40Plan

    The official haproxy docker images before 1.8.18-alpine (Alpine specific) contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    docker · haproxy docker imageDec 16, 2020

  • CVE-2020-35196
    40Plan

    The official rabbitmq docker images before 3.7.13-beta.1-management-alpine (Alpine specific) contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    docker · rabbitmq docker imageDec 16, 2020

  • CVE-2020-35197
    40Plan

    The official memcached docker images before 1.5.11-alpine (Alpine specific) contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    docker · memcached docker imageDec 16, 2020

  • CVE-2020-29389
    40Plan

    The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    docker · crux linux docker imageDec 2, 2020

  • CVE-2015-9259
    39Monitor

    In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment st

    CriticalCVSS 9.8No exploitEPSS 1%

    docker · notaryMar 31, 2018

  • CVE-2023-0626
    39Monitor

    Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route

    CriticalCVSS 9.8No exploitEPSS 1%

    docker · docker desktopSep 25, 2023

  • CVE-2023-0625
    39Monitor

    Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog

    CriticalCVSS 9.8No exploitEPSS 1%

    docker · docker desktopSep 25, 2023

  • CVE-2018-15514
    36Monitor

    HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deserialized requests over

    HighCVSS 8.8No exploitEPSS 2%

    docker · dockerAug 31, 2018

  • CVE-2024-8695
    36Monitor

    A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2

    CriticalCVSS 9.0No exploitEPSS 1%

    docker · desktopSep 12, 2024

  • CVE-2014-9356
    35Monitor

    Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection me

    HighCVSS 8.6No exploitEPSS 5%

    docker · dockerDec 2, 2019