Skip to contentKubernetes vulnerabilities
Newest
- kubernetesBypassing enforce mountable secrets policy imposed by the ServiceAccount admission pluginCVE-2023-2728Public exploitFix available6.5 Medium
- kubernetesBypassing policies imposed by the ImagePolicyWebhook admission pluginCVE-2023-2727Fix available6.5 Medium
- fedoraproject fedora, kubernetes +1 moreBypass of seccomp profile enforcementCVE-2023-2431Fix available3.4 Low
- kubernetes secrets-store-csi-driverKubernetes secrets-store-csi-driver discloses service account tokens in logsCVE-2023-2878Fix available6.5 Medium
- kubernetes minikube[minikube] ssh server with default passwordCVE-2023-19448.4 High
- kubernetes minikube[minikube] Network Port exposure in minikube running on macOS using Docker driverCVE-2023-11749.8 Critical
- kubernetesrunAsNonRoot logic bypass for Windows containersCVE-2021-257497.8 High
- kubernetes ingress-nginxIngress-nginx `path` sanitization can be bypassed with newline characterCVE-2021-25748Fix available7.6 High
- kubernetesNode address isn't always verified when proxyingCVE-2022-3294Public exploitFix available6.6 Medium
- kubernetesUnauthorized read of Custom ResourcesCVE-2022-3162Fix available6.5 Medium
- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privescCVE-2022-4318Fix available7.8 High
- kubernetes apiserver, kube-apiserver +1 moreKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)CVE-2022-3172Public exploitFix available5.1 Medium
- kubernetes cri-oCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosureCVE-2022-2995Fix available7.1 High
- kubernetes aws-iam-authenticatorAccessKeyID validation bypassCVE-2022-2385Fix available8.1 High
- kubernetes cri-o, fedoraproject fedora, redhat enterprise linux +1 more +3 moreNode DOS by way of memory exhaustion through ExecSync request in CRI-OCVE-2022-1708Fix available7.5 High
- kubernetes ingress-nginxIngress-nginx directive injection via annotationsCVE-2021-257467.6 High
- kubernetes ingress-nginxIngress-nginx path can be pointed to service account token fileCVE-2021-25745Fix available7.6 High
- kubernetes cri-o, mobyproject moby, fedoraproject fedora +1 more +3 moreIncorrect Default Permissions in CRI-OCVE-2022-27652Fix available5.3 Medium
- kubernetes cri-oCode Injection in CRI-OCVE-2022-0811Public exploitFix availableEPSS 19.0%8.8 High
- kubernetes cri-o, redhat openshift container platform +1 moreIncorrect Permission Assignment for Critical Resource in CRI-OCVE-2022-0532Fix available4.2 Medium
- kubernetesBypass of Kubernetes API Server proxy TOCTOUCVE-2020-8562Fix available2.2 Low
- kubernetesANSI escape characters in kubectl output are not being filteredCVE-2021-25743Fix available3.0 Low
- kubernetes ingress-nginx, netapp trident +1 moreIngress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespacesCVE-2021-25742Fix available7.6 High
- kubernetes java, java client +1 moreCode exec via yaml parsingCVE-2021-25738Fix available6.7 Medium
- kubernetesSymlink Exchange Can Allow Host Filesystem AccessCVE-2021-25741Public exploitFix available8.8 High
- kubernetesHoles in EndpointSlice Validation Enable Host Network HijackCVE-2021-25740Fix available3.1 Low
- kubernetesWebhook redirect in kube-apiserverCVE-2020-8561Fix available4.1 Medium
- kubernetesHoles in EndpointSlice Validation Enable Host Network HijackCVE-2021-25737Fix available2.7 Low
- kubernetesValidating Admission Webhook does not observe some previous fieldsCVE-2021-25735Public exploitFix available6.5 Medium
- kubernetes java, java client +1 moreKubernetes Java client libraries unvalidated path traversal in Copy implementationCVE-2020-8570Public exploitFix available9.1 Critical
- kubernetes container storage interface snapshotter, csi snapshotter +1 moreKubernetes CSI snapshot-controller DoSCVE-2020-8569Fix available4.3 Medium
- kubernetes secrets store csi driverKubernetes Secrets Store CSI Driver sync/rotate directory traversalCVE-2020-8568Fix available5.8 Medium
- kubernetes secrets store csi driver, google secret manager provider for secret store csi driver, hashicorp vault provider for secrets store csi driver +1 more +3 moreKubernetes Secrets Store CSI Driver plugin directory traversalsCVE-2020-8567Fix available4.9 Medium
- kubernetes, oracle communications cloud native core network slice selection function, communications cloud native core policy +1 more +3 moreKubernetes man in the middle using LoadBalancer or ExternalIPsCVE-2020-8554Public exploitFix available6.3 Medium
- kubernetesSecret leaks in logs for vSphere Provider kube-controller-managerCVE-2020-8563Fix available4.7 Medium
- kubernetesDocker config secrets leaked when file is malformed and loglevel >= 4CVE-2020-8564Fix available4.7 Medium
- kubernetesIncomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9CVE-2020-8565Fix available4.7 Medium
- kubernetesCeph RBD adminSecrets exposed in logs when loglevel >= 4CVE-2020-8566Fix available4.7 Medium
- kubernetes ingress-nginxKubernetes ingress-nginx Compromise of auth via subset/superset namespace namesCVE-2020-8553Fix available5.9 Medium
- kubernetesKubernetes node setting allows for neighboring hosts to bypass localhost boundaryCVE-2020-8558Public exploitFix available5.4 Medium
- kubernetesKubernetes node disk Denial of Service by writing to container /etc/hostsCVE-2020-8557Fix available5.5 Medium
- kubernetesCredential leakage when failing to mountCVE-2019-11252Fix available5.9 Medium
- kubernetesPrivilege escalation from compromised node to clusterCVE-2020-8559Public exploitFix available6.4 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes kube-controller-manager SSRFCVE-2020-8555Fix available6.3 Medium
- kubernetesKubernetes API Server denial of service vulnerability from malicious YAML payloadsCVE-2019-11254Fix available6.5 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes API server denial of serviceCVE-2020-8552Fix available5.3 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes kubelet denial of serviceCVE-2020-8551Fix available4.3 Medium
- kuberneteskubectl cp allows symlink directory traversalCVE-2019-11251Fix available4.8 Medium
- kubernetes k8s.gcr.io/defaultbackend, nginx ingress controller +1 moreKubernetes ingress exposes sensitive informationCVE-2018-1002104Fix available5.3 Medium
- kubernetes external-provisioner, external-resizer, external-snapshotter +4 more +6 moreKubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutationCVE-2019-11255Fix available4.8 Medium
- Show moreLoading…