8955 matches found
About Remote Code Execution – Kubernetes (CVE-2025-1974) vulnerability
About Remote Code Execution - Kubernetes CVE-2025-1974 vulnerability. An unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. In the default...
Vulnerabilities fixed in Kubernetes Ingress NGINX Controller
Kubernetes has fixed a number of vulnerabilities in the Ingress NGINX Controller. These vulnerabilities allow malicious actors to perform unauthenticated remote code execution RCE. The vulnerabilities are located in the ingress-nginx controller. These vulnerabilities include a critical remote cod...
RHSA-2025:3262 Red Hat Security Advisory: nginx:1.24 security update
Bulletin has no description...
RHSA-2025:3261 Red Hat Security Advisory: nginx:1.22 security update
Bulletin has no description...
Exploit for CVE-2025-1974
🚨 Log Injection Test via Ingress-NGINX Admission Controller...
Remote code execution vulnerability in Ingress NGINX Controller (CNVD-2025-05883)
Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that can be exploited by an attacker to gain access to sensitive data such as credentials and keys across...
Remote code execution vulnerability in Ingress NGINX Controller (CNVD-2025-05884)
Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that can be exploited by an attacker to gain access to sensitive data such as credentials and keys across...
NGINX TLS 1.3 Unauthorized Access
The vulnerability of the TLS 1.3 implementation in NGINX Plus and NGINX Open Source web servers is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
nginx:1.24 security update
1.24.0-4.0.1.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-4.1 - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service CVE-2024-7347 1:1.24.0-4 - Resolves: RHEL-49350 - nginx worker...
Remote Code Execution Vulnerability in Ingress NGINX Controller (CNVD-2025-05886)
Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that stems from auth-tls-match-cn Ingress annotations can be used to inject configurations, which could le...
Remote Code Execution Vulnerability in Ingress NGINX Controller (CNVD-2025-05885)
Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that stems from the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary...
nginx:1.22 security update
1.22.1-8.0.1.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.22.1-8.1 - Resolves: RHEL-84486 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service CVE-2024-7347 1:1.22.1-8 - Resolves: RHEL-49349 - nginx worker...
CVE-2025-1098 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-823X-FV5P-H7HW vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
CVE-2025-24514 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-VG63-W3P9-JC9M vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
CVE-2025-1974 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-242M-6H72-7HGP vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...