CVE-2025-24313

Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2025-24313

Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may allow a privileged user to potentially enable denial of service via local access...

Linux Distros Unpatched Vulnerability : CVE-2019-19922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfsquotaus is used e.g., with Kubernetes, allows attackers to cause a denial of service against...

PT-2025-32726 · Intel · Intel Device Plugins For Kubernetes

Name of the Vulnerable Software and Affected Versions: Intel Device Plugins for Kubernetes versions prior to 0.32.0 Description: Improper access control in certain Device Plugins for Kubernetes software maintained by Intel may allow a privileged user to potentially cause a denial of service via...

Device Plugins for Kubernetes Advisory

Summary: A potential security vulnerability for some Device Plugins for Kubernetes software maintained by Intel may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24313 Description: Improper access...

Intel Device Plugins for Kubernetes 访问控制错误漏洞

Intel Device Plugins for Kubernetes is a set of frameworks and implementations developed by Intel for exposing hardware resources such as GPUs, FPGAs, etc. to container applications in a Kubernetes cluster. An improper access control vulnerability exists in Intel Device Plugins for Kubernetes,...

PT-2025-33265

Name of the Vulnerable Software and Affected Versions: kube-apiserver versions 1.31.11 and earlier kube-apiserver versions 1.32.7 and earlier kube-apiserver versions 1.33.3 and earlier Description: Compromised nodes can delete themselves and relabel via OwnerReferences. An attacker who has gained...

k-rail

This is a Kubernetes security tool for policy enforcement, specifically designed for workload policy enforcement. It is a deprecated project that will receive no new features or bugfixes except in the case of critical security vulnerabilities. The tool is intended to help secure a multi-tenant...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: tofu-controller, terraform-provider-azapi, kubernetes-csi-external-provisioner, gosu, kiali, xeol, crossplane-provider-azure-managedidentity, containerd, terraform-provider-sendgrid, sftpgo-plugin-kms, undock, metrics-server, sqlexporter, dbmate, bento,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: tofu-controller, terraform-provider-azapi, kubernetes-csi-external-provisioner, gosu, kiali, xeol, crossplane-provider-azure-managedidentity, containerd, terraform-provider-sendgrid, sftpgo-plugin-kms, undock, metrics-server, sqlexporter, dbmate, bento,...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, azure-ipam, nvidia-nsight-compute-13.0, secrets-store-csi-driver-provider-gcp, rook, kubebuilder, nova-fips, http-echo, cluster-api-azure-controller, newrelic-infra-operator, vt-cli,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, azure-ipam, nvidia-nsight-compute-13.0, secrets-store-csi-driver-provider-gcp, rook, kubebuilder, nova-fips, http-echo, cluster-api-azure-controller, newrelic-infra-operator, vt-cli,...

SUSE CVE-2015-7561

Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image...

SUSE CVE-2017-1002102

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running...

SUSE CVE-2023-5528

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes...

SUSE CVE-2024-5321

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

Linux Distros Unpatched Vulnerability : CVE-2025-22021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for IPv4 packets to restore the original 5-tuple in case of SNAT, ...

Linux Distros Unpatched Vulnerability : CVE-2020-1753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versio...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.37 security and extras update

Red Hat OpenShift Container Platform release 4.17.37 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

SUSE: Security Advisory (SUSE-SU-2025:02350-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...