https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:00:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-54286 EUVD-2026-54286 https://cve.radiocsirt.org/vuln/euvd-2026-54286 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11328 <p>An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `/run/singularity/instances/sing/&lt;user&gt;/&lt;instance&gt;`. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host.</p> <p>An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `/run/singularity/instances/sing/&lt;user&gt;/&lt;instance&gt;`. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11328 https://cve.radiocsirt.org/vuln/ghsa-557g-r22w-9wvx <p><strong>Affected:</strong> Go: github.com/sylabs/singularity</p> <p>An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `/run/singularity/instances/sing/&lt;user&gt;/&lt;instance&gt;`. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host.</p> <p><strong>Affected:</strong> Go: github.com/sylabs/singularity</p> <p>An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `/run/singularity/instances/sing/&lt;user&gt;/&lt;instance&gt;`. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host.</p> https://cve.radiocsirt.org/vuln/ghsa-557g-r22w-9wvx https://cve.radiocsirt.org/vuln/gsd-2019-11328 gsd-2019-11328 https://cve.radiocsirt.org/vuln/gsd-2019-11328 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2288-1 <p>Security update for singularity</p> <p>Security update for singularity</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2288-1