Top technology
Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Chaos Mesh
CRITICAL 9.8
CVE-2025-59359
The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthentic…
Fix: 2.7.3+
Fix from $2,300
2025-09-15
Chaos Mesh
CRITICAL 9.8
CVE-2025-59360
The killProcesses mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthe…
Fix: 2.7.3+
Fix from $2,300
2025-09-15
Chaos Mesh
CRITICAL 9.8
CVE-2025-59361
The cleanIptables mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthe…
Fix: 2.7.3+
Fix from $2,300
2025-09-15
Chaos Mesh
HIGH 7.5
CVE-2025-59358
The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides…
Fix: 2.7.3+
Fix from $1,950
2025-09-15
Chaos Mesh
HIGH 8.8
CVE-2024-36538
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
No fix yet
Fix from $1,950
2024-07-24