Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Nginx Ingress Controller
HIGH 8.8
A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can …
Ingress Nginx
HIGH 8.8
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject conf…
Cri O
HIGH 8.1
A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw…
Kubernetes
HIGH 8.8
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to ad…
Apiserver
HIGH 8.2
A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to t…
Csi Proxy
HIGH 8.8
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escala…
Kubernetes
HIGH 8.8
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on tho…
Kubernetes
HIGH 8.8
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on tho…
Kubernetes
MEDIUM 6.3
Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer S…
Ingress Nginx
HIGH 8.8
Ingress nginx annotation injection causes arbitrary command execution.
Ingress Nginx
HIGH 8.8
Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.
Ingress Nginx
MEDIUM 6.5
Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.
Operations
HIGH 8.8
Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.
Cri O
HIGH 7.8
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment vari…
Kube Apiserver
HIGH 8.0
An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given p…
Cri O
MEDIUM 5.3
The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-20…
Kubernetes
MEDIUM 6.5
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters ar…
Kubernetes
MEDIUM 6.5
Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral …
Kubernetes
MEDIUM 5.5
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profi…
Secrets Store Csi Driver
MEDIUM 5.5
Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs.
Minikube
CRITICAL 9.8
This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube …
Kubernetes
HIGH 7.8
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.
Minikube
HIGH 7.8
This vulnerability enables ssh access to minikube container using a default password.
Ingress Nginx
MEDIUM 6.5
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the san…
Kubernetes
HIGH 8.8
Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node ob…
Kubernetes
MEDIUM 6.5
Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API g…
Cri O
HIGH 7.1
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modifica…
Aws Iam Authenticator
HIGH 8.8
A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privile…
Cri O
HIGH 7.5
A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync reque…
Ingress Nginx
HIGH 8.1
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[].path fi…