Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Ingress Nginx
HIGH 7.1
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress o…
Cri O
MEDIUM 5.3
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker En…
Cri O
HIGH 8.8
A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster th…
Ingress Nginx
HIGH 7.1
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain…
Java
MEDIUM 6.7
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
Kubernetes
HIGH 8.1
A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories…
Kubernetes
MEDIUM 6.5
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected …
Java
CRITICAL 9.1
Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying mu…
Secrets Store Csi Driver
MEDIUM 6.5
Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the …
Container Storage Interface Snapshotter
MEDIUM 6.5
Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot…
Kubernetes
MEDIUM 5.0
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept tr…
Kubernetes
MEDIUM 5.5
In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the clo…
Kubernetes
MEDIUM 5.5
In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker confi…
Kubernetes
MEDIUM 5.5
In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API se…
Kubernetes
MEDIUM 5.5
In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This…
Ingress Nginx
MEDIUM 5.9
The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress obj…
Kubernetes
HIGH 8.8
The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows…
Kubernetes
MEDIUM 5.5
The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its …
Kubernetes
MEDIUM 6.5
The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and even…
Kubernetes
MEDIUM 6.8
The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect o…
Kubernetes
MEDIUM 6.3
The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a S…
Kubernetes
MEDIUM 6.5
The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malici…
Kubernetes
MEDIUM 6.5
The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via t…
Kubernetes
MEDIUM 5.7
The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provid…
Nginx Ingress Controller
MEDIUM 5.3
Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.
External Provisioner
MEDIUM 6.5
Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshot…
Cri O
MEDIUM 5.0
A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (…
Kube State Metrics
MEDIUM 6.5
A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that en…
Kubernetes
HIGH 7.5
Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows aut…
Kubernetes
HIGH 8.2
The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's hea…