İçeriğe atla
Noroxi

kubernetes kayıtları

kubernetes üreticisine ait 102 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%90,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

102 kayıt
  • CVE-2018-1002105
    65Bu hafta

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the

    KritikCVSS 9,8Kavram kanıtıEPSS %87

    kubernetes · kubernetes5 Ara 2018

  • CVE-2019-11248
    55Planlayın

    Kubernetes kubelet exposes /debug/pprof info on healthz port

    YüksekCVSS 8,2Kavram kanıtıEPSS %75

    kubernetes · kubernetes28 Ağu 2019

  • CVE-2023-5044
    52Planlayın

    Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

    YüksekCVSS 8,8Kavram kanıtıEPSS %57

    kubernetes · ingress-nginx25 Eki 2023

  • CVE-2018-18264
    51Planlayın

    Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within

    YüksekCVSS 7,5Kavram kanıtıEPSS %70

    kubernetes · dashboard2 Oca 2019

  • CVE-2024-7646
    43Planlayın

    A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `ex

    YüksekCVSS 8,8Kavram kanıtıEPSS %27

    kubernetes · ingress-nginx16 Ağu 2024

  • CVE-2017-1002101
    42Planlayın

    In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with

    KritikCVSS 9,6Kavram kanıtıEPSS %13

    kubernetes · kubernetes13 Mar 2018

  • CVE-2022-0811
    41Planlayın

    A flaw was found in CRI-O in the way it set kernel options for a pod.

    YüksekCVSS 8,8Kavram kanıtıEPSS %19

    kubernetes · cri-o16 Mar 2022

  • CVE-2016-1906
    40Planlayın

    Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that

    KritikCVSS 9,8İstismar yokEPSS %5

    kubernetes · kubernetes3 Şub 2016

  • CVE-2018-1002101
    40Planlayın

    In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Wi

    KritikCVSS 9,8İstismar yokEPSS %4

    kubernetes · kubernetes5 Ara 2018

  • CVE-2017-1000056
    40Planlayın

    Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to

    KritikCVSS 9,8İstismar yokEPSS %3

    kubernetes · kubernetes17 Tem 2017

  • CVE-2025-57870
    40Planlayın

    BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.

    KritikCVSS 10,0İstismar yokEPSS %1

    esri · arcgis server22 Eki 2025

  • CVE-2023-3676
    39İzleyin

    Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

    YüksekCVSS 8,8İstismar yokEPSS %13

    kubernetes · kubernetes31 Eki 2023

  • CVE-2026-13019
    39İzleyin

    Missing Authentication

    KritikCVSS 9,8İstismar yokEPSS %1

    esri · portal for arcgis7 Tem 2026

  • CVE-2023-1174
    39İzleyin

    [minikube] Network Port exposure in minikube running on macOS using Docker driver

    KritikCVSS 9,8İstismar yokEPSS %1

    kubernetes · minikube24 May 2023

  • CVE-2026-33519
    39İzleyin

    Incorrect privilege assignment in Portal for ArcGIS

    KritikCVSS 9,8İstismar yokEPSS %0

    esri · portal for arcgis21 Nis 2026

  • CVE-2026-13020
    39İzleyin

    Weak Password Recovery Mechanism in Portal for ArcGIS

    KritikCVSS 9,8İstismar yokEPSS %0

    esri · portal for arcgis7 Tem 2026

  • CVE-2019-11253
    38İzleyin

    Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack

    YüksekCVSS 7,5Kavram kanıtıEPSS %26

    kubernetes · kubernetes17 Eki 2019

  • CVE-2020-8570
    37İzleyin

    Kubernetes Java client libraries unvalidated path traversal in Copy implementation

    KritikCVSS 9,1Kavram kanıtıEPSS %4

    kubernetes · java21 Oca 2021

  • CVE-2023-5528
    36İzleyin

    Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation

    YüksekCVSS 8,8İstismar yokEPSS %4

    kubernetes · kubernetes14 Kas 2023

  • CVE-2023-3955
    36İzleyin

    Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

    YüksekCVSS 8,8İstismar yokEPSS %4

    kubernetes · kubernetes31 Eki 2023

  • CVE-2020-8558
    36İzleyin

    Kubernetes node setting allows for neighboring hosts to bypass localhost boundary

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    kubernetes · kubernetes27 Tem 2020

  • CVE-2023-3893
    36İzleyin

    Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation

    YüksekCVSS 8,8İstismar yokEPSS %2

    kubernetes · csi proxy3 Kas 2023

  • CVE-2023-5043
    36İzleyin

    Ingress nginx annotation injection causes arbitrary command execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    kubernetes · ingress-nginx25 Eki 2023

  • CVE-2018-1000400
    36İzleyin

    Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabi

    YüksekCVSS 8,8İstismar yokEPSS %2

    kubernetes · cri-o18 May 2018

  • CVE-2022-3294
    35İzleyin

    Node address isn't always verified when proxying

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    kubernetes · kubernetes1 Mar 2023