CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

437 matches found

Nuclei•added 18 hours ago•34 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

8.8CVSS7.2AI score0.32473EPSS

SaveExploits8References3

Nuclei•added 18 hours ago•53 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...

8.8CVSS7.2AI score0.83421EPSS

SaveExploits7References3

Nuclei•added 18 hours ago•51 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

8.8CVSS7.2AI score0.35381EPSS

SaveExploits7References3

OSV•added 2026/07/21 7:12 a.m.•7 views

CLEANSTART-2026-LN45890 Security fixes for CVE-2024-55549, CVE-2025-24855, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-41080, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-45186, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.14.5-r1, 1.14.5-r2, 1.14.5-r3

Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...

9.6CVSS6.5AI score0.00655EPSS

SaveExploits5References33

OSV•added 2026/07/21 7:8 a.m.•3 views

CLEANSTART-2026-OM32721 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-41080, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-45186, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.13.9-r0, 1.14.5-r1, 1.14.5-r2

Multiple security vulnerabilities affect the ingress-nginx-controller-1.13 package. These issues are resolved in later releases. See references for individual vulnerability details...

9.6CVSS5.8AI score0.00655EPSS

SaveExploits1References29

OSV•added 2026/07/13 7:4 a.m.•5 views

CLEANSTART-2026-HJ99696 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507 applied in versions: 1.14.5-r1

Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...

9.6CVSS6.1AI score0.00655EPSS

SaveExploits0References21

Chainguard•added 2026/07/09 8:31 p.m.•17 views

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: docker, commercial-spilo, gitlab-rails-ce, podman-fips, virt-operator-fips, kubeflow-katib, docker-cli-buildx-fips, grafana-alloy-fips, pulumi-language-yaml, traefik, knative-operator-fips, terraform, grafana-operator, karpenter, buildkitd-fips,...

5.8AI score

SaveExploits0