Filter
Software
kubernetes dashboard
63
kubernetes nginx ingress controller
13
kubernetes kubelet
8
kubernetes minikube
3
kubernetes
2
kubernetes apiserver
2
kubernetes image builder
2
kubernetes secrets store csi driver
2
kubernetes aws iam authenticator
1
kubernetes container storage interface snapshotter
1
kubernetes continuous deploy
1
kubernetes csi proxy
1
kubernetes external-provisioner
1
kubernetes external-resizer
1
kubernetes external-snapshotter
1
kubernetes ingress nginx
1
kubernetes kube-apiserver
1
kubernetes kube-state-metrics
1
kubernetes operations
1
go/github.com/kubernetes-csi/csi-proxyKubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation
8.8
First published (updated )
Kubernetes DashboardKubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation
8.8
First published (updated )
Kubernetes DashboardKubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation
8.8
First published (updated )
Kubernetes DashboardWindows kube-proxy LoadBalancer contention
6.3
First published (updated )
go/k8s.io/ingress-nginxIngress nginx annotation injection causes arbitrary command execution
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
go/k8s.io/ingress-nginxCode injection via nginx.ingress.kubernetes.io/permanent-redirect annotation
8.8
First published (updated )
go/k8s.io/ingress-nginxIngress-nginx `path` sanitization can be bypassed with `log_format` directive
8.8
First published (updated )
go/sigs.k8s.io/secrets-store-csi-driverKubernetes secrets-store-csi-driver discloses service account tokens in logs
6.5
First published (updated )
redhat/kube-apiserverBypassing policies imposed by the ImagePolicyWebhook admission plugin
6.5
First published (updated )
redhat/kube-apiserverBypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Kubernetes Kube-apiserverKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)
8.2
First published (updated )
[kubernetes] CVE-2025-0426: Node Denial of Service via kubelet Checkpoint API
First published (updated )
go/k8s.io/ingress-nginxIngress-nginx `path` sanitization can be bypassed with newline character
7.6
First published (updated )
redhat/kubeletrunAsNonRoot logic bypass for Windows containers
7.8
First published (updated )
Kubernetes Minikube[minikube] Network Port exposure in minikube running on macOS using Docker driver
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Kubernetes Minikube[minikube] ssh server with default password
8.4
First published (updated )
Kubernetes Dashboard[kubernetes] CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API
First published (updated )
[kubernetes] CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API
First published (updated )
Kubernetes DashboardKubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation
8.8
First published (updated )
redhat/kubernetesSymlink Exchange Can Allow Host Filesystem Access
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/kubernetesHoles in EndpointSlice Validation Enable Host Network Hijack
4.9
First published (updated )
go/k8s.io/kubernetesBypass of seccomp profile enforcement
5.5
First published (updated )
redhat openshift container platformCri-o: malicious container can create symlink on host
8.1
EPSS
0.04%
First published (updated )
Kubernetes DashboardCloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network fi…
7.5
First published (updated )
[kubernetes] CVE-2024-10220: Arbitrary command execution through gitpo volume
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
go/github.com/kubernetes-sigs/image-builderVM images built with Image Builder and Proxmox provider use default credentials
9.8
EPSS
0.07%
First published (updated )
go/github.com/kubernetes-sigs/image-builderVM images built with Image Builder with some providers use default credentials during builds
8.1
EPSS
0.06%
First published (updated )
go/k8s.io/apiserverKubernetes API server denial of service
5.3
First published (updated )
Kubernetes OperationsPrivilege Escalation in kOps using GCE/GCP Provider in Gossip Mode
8.8
First published (updated )
Google Secret Manager Provider for Secret Store CSI DriverKubernetes Secrets Store CSI Driver sync/rotate directory traversal
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.