Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Cri O
HIGH 8.1
A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw…
Cri O
HIGH 7.8
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment vari…
Kube Apiserver
HIGH 8.0
An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given p…
Cri O
MEDIUM 5.3
The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-20…
Minikube
CRITICAL 9.8
This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube …
Kube State Metrics
MEDIUM 6.5
A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that en…
Kubernetes
CRITICAL 9.8
Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use…
Kubernetes
HIGH 7.7
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a …