Skip to contentKubernetes vulnerabilities
Newest
- kubernetes, fedoraproject fedora +1 moreKubernetes API server follows unvalidated redirects from streaming Kubelet endpointsCVE-2018-1002102Fix available2.6 Low
- kubernetes cri-o, fedoraproject fedora, redhat openshift container platform +2 moreA flaw was found in cri-o, as a result of all pod-related processes being placed in the same...CVE-2019-14891Fix available5.0 Medium
- kubernetes kube-state-metrics, redhat openshift container platform +1 morekube-state-metrics may expose secret content in metricsCVE-2019-10223Fix available5.3 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attackCVE-2019-11253Fix availableEPSS 25.9%7.5 High
- kubernetes, redhat openshift container platform +1 moreKubernetes client-go logs authorization headers at debug verbosity levelsCVE-2019-11250Fix available4.7 Medium
- kubernetes, redhat openshift container platform +1 morekubectl cp allows symlink directory traversalCVE-2019-11249Fix available4.8 Medium
- kubernetesKubernetes kubelet exposes /debug/pprof info on healthz portCVE-2019-11248Fix availableEPSS 75.1%6.5 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes kube-apiserver allows access to custom resources via wrong scopeCVE-2019-11247Fix available5.0 Medium
- kuberneteskubectl cp allows symlink directory traversalCVE-2019-11246Fix available6.4 Medium
- kuberneteskubelet-started container uid changes to root after first restart or if image is already pulled to the nodeCVE-2019-11245Fix available4.9 Medium
- kubernetes, netapp trident, redhat openshift container platform +2 morekubectl creates world-writeable cached schema filesCVE-2019-11244Fix available3.3 Low
- kubernetes, netapp trident +1 moreKubernetes did not effectively clear service account credentialsCVE-2019-11243Fix available3.1 Low
- cncf portmap, kubernetes, netapp cloud insights +2 moreCloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network...CVE-2019-9946Fix available7.5 High
- kubernetes, redhat openshift container platform +1 morekubectl cp path traversalCVE-2019-1002101Public exploitFix availableEPSS 12.8%6.4 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes DoS VulnerabilityCVE-2019-1002100Fix availableEPSS 16.9%6.5 Medium
- kubernetes dashboardKubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's...CVE-2018-18264EPSS 70.4%7.5 High
- kubernetes, netapp trident, redhat openshift container platform +2 morePrivilege Escalation in KubernetesCVE-2018-1002105Public exploitFix availableEPSS 87.0%9.8 Critical
- kubernetes minikubeMinikube RCE via DNS RebindingCVE-2018-10021038.1 High
- kubernetesKubernetes Arbitrary Command InjectionCVE-2018-1002101Fix available5.9 Medium
- kubernetes, red hat openshift +1 moreIt was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509...CVE-2016-7075Fix available7.5 High
- kubernetesKubernetes arbitrary file overwriteCVE-2018-1002100Fix available4.2 Medium
- kubernetes cri-oKubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270)...CVE-2018-10004008.8 High
- kubernetesKubernetes arbitrary file overwriteCVE-2017-1002102Fix available7.1 High
- kubernetesIn Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4...CVE-2017-1002101Public exploitFix availableEPSS 13.3%8.8 High
- kubernetesDefault access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud...CVE-2017-10021006.5 Medium
- kubernetes, redhat openshift +1 moreKubernetes in OpenShift3 Access Control MisconfigurationCVE-2015-7561Fix available3.1 Low
- kubernetesKubernetes Privilege EscalationCVE-2017-1000056Fix available9.8 Critical
- kubernetes, redhat openshift +1 moreInformation Exposure in KubernetesCVE-2015-7528Fix available5.3 Medium
- kubernetesAuthorization bypass in OpenshiftCVE-2016-1906Fix available9.8 Critical
- kubernetesAccess Restriction Bypass in kubernetesCVE-2016-1905Fix available7.7 High