PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/canonical/lxd lxd allows Cross-guest volume hijack via DevLXD device patch High Risk 8.4 16 hours ago 9 hours ago
github.com/canonical/lxd LXD allows cross-guest volume hijack via DevLXD device patch in github.com/canonical/lxd Unknown 9 hours ago 9 hours ago
github.com/canonical/lxd Canonical LXD Project Existence Determination Through Error Handling in Image Export Function Medium Risk 6.0 1 year ago 1 month ago
github.com/canonical/lxd Canonical LXD Project Existence Determination Through Error Handling in Image Get Function Medium Risk 5.3 1 year ago 1 month ago
github.com/canonical/lxd Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API Medium Risk 6.8 1 year ago 1 month ago
github.com/canonical/lxd Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function Medium Risk 6.5 1 year ago 1 month ago
github.com/canonical/lxd Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server Medium Risk 4.1 1 year ago 1 month ago
github.com/canonical/lxd Canonical LXD CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI High Risk 8.3 1 year ago 1 month ago
github.com/canonical/lxd LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf Critical 9.1 6 months ago 2 months ago
github.com/canonical/lxd LXD: Importing a crafted backup leads to project restriction bypass Critical 9.1 6 months ago 2 months ago
github.com/canonical/lxd LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin Critical 9.1 6 months ago 2 months ago
github.com/canonical/lxd Type field in restricted TLS certificate allows privilege escalation in github.com/canonical/lxd Unknown 2 months ago 2 months ago
github.com/canonical/lxd VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf in github.com/canonical/lxd Unknown 2 months ago 2 months ago
github.com/canonical/lxd LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd Unknown 2 months ago 2 months ago
github.com/canonical/lxd lxd has a restricted TLS certificate privilege escalation when in PKI mode Low Risk 3.8 1 year ago 4 months ago
github.com/canonical/lxd lxd's non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints Medium Risk 6.0 8 months ago 7 months ago
github.com/canonical/lxd Non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints in github.com/canonical/lxd Unknown 8 months ago 7 months ago
github.com/canonical/lxd LXD vulnerable to a local privilege escalation through custom storage volumes High Risk 8.0 11 months ago 11 months ago
github.com/canonical/lxd LXD vulnerable to a local privilege escalation through custom storage volumes in lxd in github.com/canonical/lxd Unknown 11 months ago 11 months ago
github.com/canonical/lxd Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd Unknown 1 year ago 1 year ago
github.com/canonical/lxd CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI in github.com/canonical/lxd Unknown 1 year ago 1 year ago
github.com/canonical/lxd Canonical LXD Project Existence Determination Through Error Handling in Image Get Function in github.com/canonical/lxd Unknown 1 year ago 1 year ago
github.com/canonical/lxd Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function in github.com/canonical/lxd Unknown 1 year ago 1 year ago
github.com/canonical/lxd Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd Unknown 1 year ago 1 year ago
github.com/canonical/lxd Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd Unknown 1 year ago 1 year ago
github.com/canonical/lxd Canonical LXD documentation improvement to make clear restricted.devices.disk=allow without restricted.devices.disk.paths also allows shift=true Low Risk 3.0 2 years ago 1 year ago
github.com/canonical/lxd lxd CA certificate sign check bypass Low Risk 3.8 1 year ago 1 year ago
github.com/canonical/lxd Restricted TLS certificate privilege escalation when in PKI mode in github.com/canonical/lxd Unknown 1 year ago 1 year ago
github.com/canonical/lxd CA certificate sign check bypass in github.com/canonical/lxd Unknown 1 year ago 1 year ago
Data courtesy of OSV.dev
Page 1