Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-70819

Unauthorized Mount of Sensitive Host Files via Docker Compose Volume Paths

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zettlab
Products
D6 Ultra
CVE-2025-70820

Absolute Path Traversal in Zettlab D6 Ultra Enables Unauthorized Access to Non-Personal Directories

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Zettlab
Products
D6 Ultra