Filter
AND

Kubernetes DashboardOpenshift allows remote attackers to gain privileges by updating a build configuration that was crea…

First published (updated )

redhat openshift container platformWith a specially crafted request, users are able to establish a connection through the Kubernetes AP…

First published (updated )

Kubernetes DashboardKubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admi…

First published (updated )

go/k8s.io/kubernetesOS Command Injection

First published (updated )

Kubernetes DashboardIt was found that volume security can be sidestepped with innocent emptyDir and subpath. A pod could…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Kubernetes DashboardGHSL-2023-136_Samson

8.8
First published (updated )

redhat/openshiftKubernetes node setting allows for neighboring hosts to bypass localhost boundary

8.8
First published (updated )

go/github.com/kubernetes/kubernetesNode address isn't always verified when proxying

8.8
First published (updated )

redhat/kubernetesSymlink Exchange Can Allow Host Filesystem Access

8.8
First published (updated )

Kubernetes DashboardKubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Kubernetes DashboardKubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

8.8
First published (updated )

Kubernetes DashboardKubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation

8.8
First published (updated )

Kubernetes DashboardKubernetes kubelet exposes /debug/pprof info on healthz port

8.2
First published (updated )

Kubernetes DashboardKubernetes kube-apiserver allows access to custom resources via wrong scope

8.1
First published (updated )

Red Hat OpenShiftUpstream reports: Clients using SSL certs for auth show the subject CN of their intermediate cert no…

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Kubernetes DashboardIn Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of…

8.1
First published (updated )

redhat/kubeletrunAsNonRoot logic bypass for Windows containers

7.8
First published (updated )

redhat/kuberneteskubelet-started container uid changes to root after first restart or if image is already pulled to the node

7.8
First published (updated )

go/github.com/kubernetes/kubernetesThe API server in Kubernetes does not properly check admission control, which allows remote authenti…

7.7
First published (updated )

Kubernetes DashboardKubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Kubernetes DashboardCloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network fi…

7.5
First published (updated )

Kubernetes DashboardKubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Ser…

7.5
First published (updated )

Kubernetes DashboardIn Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 cont…

7.1
First published (updated )

Kubernetes DashboardA security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may…

First published (updated )

Kubernetes DashboardA security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Kubernetes DashboardPrivilege escalation from compromised node to cluster

First published (updated )

Kubernetes DashboardKubernetes client-go logs authorization headers at debug verbosity levels

First published (updated )

go/k8s.io/kubernetesKubernetes kubelet denial of service

First published (updated )

redhat/kubernetesKubernetes API Server denial of service vulnerability from malicious YAML payloads

First published (updated )

redhat/kubernetesValidating Admission Webhook does not observe some previous fields

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203