Vulnerabilities (CVE)

Filtered by vendor Docker Subscribe
Total 105 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-5282 1 Docker 1 Docker 2024-11-21 5.5 MEDIUM 8.1 HIGH
Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'.
CVE-2014-5278 1 Docker 1 Docker 2024-11-21 4.3 MEDIUM 5.3 MEDIUM
A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs.
CVE-2014-0048 2 Apache, Docker 2 Geode, Docker 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.
CVE-2024-8695 1 Docker 1 Desktop 2024-09-13 N/A 9.8 CRITICAL
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.
CVE-2024-8696 1 Docker 1 Desktop 2024-09-13 N/A 9.8 CRITICAL
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.