CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/06/2024 |
| CVE-2023-5528 | 高危8.8 | A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes. | 14/11/2023 |
| CVE-2022-3172 | 高危8.2 | A security issue was discovered in kube-apiserver that allows an
aggregated API server to redirect client traffic to any URL. This could
lead to the client performing unexpected actions as well as forwarding
the client's API server credentials to third parties. | 03/11/2023 |
| CVE-2023-3893 | 高危8.8 | A security issue was discovered in Kubernetes where a user that can
create pods on Windows nodes running kubernetes-csi-proxy may be able to
escalate to admin privileges on those nodes. Kubernetes clusters are
only affected if they include Windows nodes running
kubernetes-csi-proxy. | 03/11/2023 |
| CVE-2023-3955 | 高危8.8 | A security issue was discovered in Kubernetes where a user
that can create pods on Windows nodes may be able to escalate to admin
privileges on those nodes. Kubernetes clusters are only affected if they
include Windows nodes. | 31/10/2023 |
| CVE-2023-3676 | 高危8.8 | A security issue was discovered in Kubernetes where a user
that can create pods on Windows nodes may be able to escalate to admin
privileges on those nodes. Kubernetes clusters are only affected if they
include Windows nodes. | 31/10/2023 |
| CVE-2021-25736 | 中危6.3 | Kube-proxy
on Windows can unintentionally forward traffic to local processes
listening on the same port (“spec.ports[*].port”) as a LoadBalancer
Service when the LoadBalancer controller
does not set the “status.loadBalancer.ingress[].ip” field. Clusters
where the LoadBalancer controller sets the
“status.loadBalan | 30/10/2023 |
| CVE-2023-5044 | 高危8.8 | Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation. | 25/10/2023 |
| CVE-2023-5043 | 高危8.8 | Ingress nginx annotation injection causes arbitrary command execution. | 25/10/2023 |
| CVE-2022-4886 | 中危6.5 | Ingress-nginx `path` sanitization can be bypassed with `log_format` directive. | 25/10/2023 |
| CVE-2023-1943 | 高危8.8 | Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.
| 12/10/2023 |
| CVE-2023-2728 | 中危6.5 | Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are onl | 03/07/2023 |
| CVE-2023-2727 | 中危6.5 | Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers. | 03/07/2023 |
| CVE-2023-2431 | 中危5.5 | A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This b | 16/06/2023 |
| CVE-2023-2878 | 中危5.5 | Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs. | 07/06/2023 |
| CVE-2023-1944 | 高危7.8 | This vulnerability enables ssh access to minikube container using a default password. | 24/05/2023 |
| CVE-2023-1174 | 严重9.8 | This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container. | 24/05/2023 |
| CVE-2021-25749 | 高危7.8 | Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true. | 24/05/2023 |