CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/06/2024 |
| CVE-2023-5528 | HOCH8.8 | A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes. | 14/11/2023 |
| CVE-2022-3172 | HOCH8.2 | A security issue was discovered in kube-apiserver that allows an
aggregated API server to redirect client traffic to any URL. This could
lead to the client performing unexpected actions as well as forwarding
the client's API server credentials to third parties. | 03/11/2023 |
| CVE-2023-3893 | HOCH8.8 | A security issue was discovered in Kubernetes where a user that can
create pods on Windows nodes running kubernetes-csi-proxy may be able to
escalate to admin privileges on those nodes. Kubernetes clusters are
only affected if they include Windows nodes running
kubernetes-csi-proxy. | 03/11/2023 |
| CVE-2023-3955 | HOCH8.8 | A security issue was discovered in Kubernetes where a user
that can create pods on Windows nodes may be able to escalate to admin
privileges on those nodes. Kubernetes clusters are only affected if they
include Windows nodes. | 31/10/2023 |
| CVE-2023-3676 | HOCH8.8 | A security issue was discovered in Kubernetes where a user
that can create pods on Windows nodes may be able to escalate to admin
privileges on those nodes. Kubernetes clusters are only affected if they
include Windows nodes. | 31/10/2023 |
| CVE-2021-25736 | MITTEL6.3 | Kube-proxy
on Windows can unintentionally forward traffic to local processes
listening on the same port (“spec.ports[*].port”) as a LoadBalancer
Service when the LoadBalancer controller
does not set the “status.loadBalancer.ingress[].ip” field. Clusters
where the LoadBalancer controller sets the
“status.loadBalan | 30/10/2023 |
| CVE-2023-5044 | HOCH8.8 | Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation. | 25/10/2023 |
| CVE-2023-5043 | HOCH8.8 | Ingress nginx annotation injection causes arbitrary command execution. | 25/10/2023 |
| CVE-2022-4886 | MITTEL6.5 | Ingress-nginx `path` sanitization can be bypassed with `log_format` directive. | 25/10/2023 |
| CVE-2023-1943 | HOCH8.8 | Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.
| 12/10/2023 |
| CVE-2023-2728 | MITTEL6.5 | Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are onl | 03/07/2023 |
| CVE-2023-2727 | MITTEL6.5 | Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers. | 03/07/2023 |
| CVE-2023-2431 | MITTEL5.5 | A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This b | 16/06/2023 |
| CVE-2023-2878 | MITTEL5.5 | Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs. | 07/06/2023 |
| CVE-2023-1944 | HOCH7.8 | This vulnerability enables ssh access to minikube container using a default password. | 24/05/2023 |
| CVE-2023-1174 | KRITISCH9.8 | This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container. | 24/05/2023 |
| CVE-2021-25749 | HOCH7.8 | Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true. | 24/05/2023 |