CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

582 matches found

Check Point Advisories•added 2019/12/26 12:0 a.m.•7 views

Kubernetes API Server Denial Of Service (CVE-2019-11253)

A denial-of-service vulnerability exists in Kubernetes API Server. An attacker can exploit this issue by sending a maliciously crafted JSON or YAML file causing the API server to consume excessive CPU or memory. A successful attack can cause the service to crash leading to a denial of service...

5CVSS3.4AI score0.25939EPSS

SaveExploits2

RedhatCVE•added 2019/12/17 8:41 p.m.•41 views

CVE-2018-1002102

Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints to arbitrary hosts. Impacted API servers will follow the redirect as a GET request with client-certificat...

2.6CVSS4.1AI score0.00618EPSS

SaveExploits0References3

OSV•added 2019/12/05 4:15 p.m.•27 views

CVE-2018-1002102

2.6CVSS6.7AI score

SaveExploits0References2

NVD•added 2019/12/05 4:15 p.m.•26 views

CVE-2018-1002102

2.6CVSS3.6AI score0.00618EPSS

SaveExploits0References2

Prion•added 2019/12/05 4:15 p.m.•21 views

Input validation

2.1CVSS4.1AI score0.00618EPSS

SaveExploits0References2Affected Software2

UbuntuCve•added 2019/12/05 4:15 p.m.•35 views

CVE-2018-1002102

2.6CVSS6AI score0.00618EPSS

SaveExploits0References2

Cvelist•added 2019/12/05 4:5 p.m.•52 views

CVE-2018-1002102 Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints

2.6CVSS3.5AI score0.00618EPSS

SaveExploits0References2

Debian CVE•added 2019/12/05 4:5 p.m.•72 views

CVE-2018-1002102

2.6CVSS4.2AI score0.00618EPSS

SaveExploits0

CVE•added 2019/12/05 4:5 p.m.•121 views

CVE-2018-1002102

CVE-2018-1002102 involves improper validation of URL redirection in the Kubernetes API server before v1.14.0. An attacker-controlled Kubelet could cause the API server to redirect streaming endpoint requests to arbitrary hosts, and the API server would follow the redirect as a GET with client-cer...

2.6CVSS4.1AI score0.00618EPSS

SaveExploits0References2Affected Software1

RedHat Linux•added 2019/11/07 3:16 p.m.•2 views

kubernetes: YAML parsing vulnerable to "Billion Laughs" attack, allowing for remote denial of service

A flaw was found kubernetes. The parsing of YAML manifests by the Kubernetes API server could lead to a denial-of-service attack leaving it vulnerable to an instance of a "billion laughs" attack. The highest threat from this vulnerability is to system availability...

7.5CVSS6.8AI score0.25939EPSS

SaveExploits2References5

IBM Security Bulletins•added 2019/10/31 2:18 p.m.•28 views

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by Kubernetes security vulnerability (CVE-2019-11247)

Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability in Kubernetes API server that allows access to custom resources via wrong scope CVE-2019-11247. Vulnerability Details CVE-ID: CVE-2019-11247 Description: Kubernetes could allow a remote authenticated attacker to gain...

8.1CVSS0.2AI score0.02092EPSS

SaveExploits0Affected Software1

IBM Security Bulletins•added 2019/10/25 4:46 p.m.•38 views

Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2019-11253)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in the Kubernetes API server that exposes it to a denial of service attack via malicious YAML or JSON payloads CVE-2019-11253 Vulnerability Details CVE-ID: CVE-2019-11253 Description: The Kubernetes API server is...

7.5CVSS0.25939EPSS

SaveExploits2Affected Software1

RedHat Linux•added 2019/10/24 9:31 p.m.•6 views

kubernetes: API server allows access to cluster-scoped custom resources as if resources were namespaced

The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning that a user with...

8.1CVSS7.3AI score0.02092EPSS

SaveExploits0References5

Tenable Nessus•added 2019/10/24 12:0 a.m.•42 views

RHEL 7 : OpenShift Container Platform 3.9 (RHSA-2019:2769)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2769 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

8.1CVSS7.4AI score0.83433EPSS

SaveExploits1References8

GithubExploit•added 2019/10/23 7:50 p.m.•7 views

frontend

!Build Statushttps://github.com/DependencyTrack/frontend/act...

6.7AI score

SaveExploits0

NVD•added 2019/10/17 4:15 p.m.•21 views

CVE-2019-11253

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming...

7.5CVSS7.4AI score0.25939EPSS

SaveExploits2References6

OSV•added 2019/10/17 4:15 p.m.•2 views

DEBIAN-CVE-2019-11253

7.5CVSS6.3AI score0.25939EPSS

SaveExploits2References1

OSV•added 2019/10/17 4:15 p.m.•31 views

CVE-2019-11253

7.5CVSS7AI score

SaveExploits0References6

Prion•added 2019/10/17 4:15 p.m.•35 views

Input validation

5CVSS7.3AI score0.25939EPSS

SaveExploits2References6Affected Software2

UbuntuCve•added 2019/10/17 4:15 p.m.•33 views

CVE-2019-11253

7.5CVSS6.8AI score0.25939EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by