Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Kubernetes
HIGH 8.1
The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced.…
Kubernetes
HIGH 7.8
In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or…
Kubernetes
MEDIUM 6.5
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the c…
Kubernetes
MEDIUM 6.5
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the c…
Kubernetes
MEDIUM 6.5
The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via log…
Kubernetes
HIGH 8.1
In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (b…
Kubernetes
MEDIUM 5.0
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), writt…
Kubernetes
HIGH 7.5
Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes.…
Kubernetes
MEDIUM 6.5
In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can …
Kubernetes
MEDIUM 5.5
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside …
Dashboard
HIGH 7.5
Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the clust…
Kubernetes
CRITICAL 9.8
In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nod…
Kubernetes
CRITICAL 9.8
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-api…
Minikube
HIGH 8.8
In Minikube versions 0.3.0-0.29.0, minikube exposes the Kubernetes Dashboard listening on the VM IP at port 30000. In VM environments where the IP is…
Kubernetes
HIGH 8.1
It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An …
Kubernetes
MEDIUM 5.5
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the c…
Cri O
HIGH 8.8
Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities th…
Kubernetes
CRITICAL 9.6
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volum…
Kubernetes
MEDIUM 5.6
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or do…
Kubernetes
MEDIUM 6.5
Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to "contain…
Kubernetes
CRITICAL 9.8
Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use…
Kubernetes
MEDIUM 5.3
Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.
Kubernetes
CRITICAL 9.8
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not al…
Kubernetes
HIGH 7.7
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a …