CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

271 matches found

Information Security Automation•added 2025/03/27 6:51 p.m.•26 views

About Remote Code Execution – Kubernetes (CVE-2025-1974) vulnerability

About Remote Code Execution - Kubernetes CVE-2025-1974 vulnerability. An unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. In the default...

9.8CVSS9.4AI score0.99098EPSS

SaveExploits21

NCSC•added 2025/03/27 2:41 p.m.•9 views

Vulnerabilities fixed in Kubernetes Ingress NGINX Controller

Kubernetes has fixed a number of vulnerabilities in the Ingress NGINX Controller. These vulnerabilities allow malicious actors to perform unauthenticated remote code execution RCE. The vulnerabilities are located in the ingress-nginx controller. These vulnerabilities include a critical remote cod...

9.8CVSS9.7AI score0.99098EPSS

SaveExploits21References6

CNVD•added 2025/03/27 12:0 a.m.•13 views

Remote Code Execution Vulnerability in Ingress NGINX Controller (CNVD-2025-05885)

Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that stems from the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary...

8.8CVSS8.1AI score0.83066EPSS

SaveExploits7References1

CNVD•added 2025/03/27 12:0 a.m.•16 views

Remote Code Execution Vulnerability in Ingress NGINX Controller (CNVD-2025-05886)

Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that stems from auth-tls-match-cn Ingress annotations can be used to inject configurations, which could le...

8.8CVSS8.2AI score0.34677EPSS

SaveExploits7References1

CNVD•added 2025/03/27 12:0 a.m.•10 views

Remote code execution vulnerability in Ingress NGINX Controller (CNVD-2025-05883)

Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that can be exploited by an attacker to gain access to sensitive data such as credentials and keys across...

9.8CVSS8.1AI score0.99098EPSS

SaveExploits20References1

CNVD•added 2025/03/27 12:0 a.m.•23 views

Remote code execution vulnerability in Ingress NGINX Controller (CNVD-2025-05884)

Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that can be exploited by an attacker to gain access to sensitive data such as credentials and keys across...

8.8CVSS8.1AI score0.31809EPSS

SaveExploits8References1