Redhat Openshift Container PlatformOpenshift-console: unauthenticated installation of helm charts
Redhat Openshift Container PlatformCri-o: security regression of cve-2022-27652
Redhat Openshift Container PlatformA user can craft a route that injects a bogus entry into one of the HAProxy configuration files. Th…
redhat/cri-oA flaw was found in cri-o, where containers were incorrectly started with non-empty default permissi…
Redhat Openshift Container PlatformThe Restricted Security Context Constraints (SCC) allows pods to craft custom network packets. An at…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/openshift-ansibleOpenShift Container Platform (OCP) 3.11 was too permissive in the way it specified CORS allowed orig…
Kubernetes External-provisionerKubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation
Redhat Openshift Container PlatformCri-o pods didn't provide sufficient isolation between the workload and infra containers such that w…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Openshift Container PlatformThe basic-user RABC role in OpenShift Container Platform doesn't sufficiently protect the GlusterFS …
Kubernetes KubernetesKubernetes client-go logs authorization headers at debug verbosity levels
Kubernetes Kuberneteskubectl cp allows symlink directory traversal
Redhat Openshift Container PlatformA missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allo…
Jenkins JenkinsA vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earl…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Openshift Container Platformkubectl creates world-writeable cached schema files
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.jenkins-ci.main:jenkins-coreA denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in Cr…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Canonical Ubuntu LinuxPoppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access …
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.