CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

437 matches found

Nuclei•added yesterday•32 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

8.8CVSS7.2AI score0.31809EPSS

SaveExploits8References3

Nuclei•added 2 days ago•49 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...

8.8CVSS7.2AI score0.83066EPSS

SaveExploits7References3

Nuclei•added 2 days ago•48 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

8.8CVSS7.2AI score0.34677EPSS

SaveExploits7References3

OSV•added 4 days ago•5 views

CLEANSTART-2026-LN45890 Security fixes for CVE-2024-55549, CVE-2025-24855, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-41080, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-45186, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.14.5-r1, 1.14.5-r2, 1.14.5-r3

Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...

9.6CVSS6.5AI score0.00655EPSS

SaveExploits5References33

OSV•added 4 days ago•2 views

CLEANSTART-2026-OM32721 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-41080, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-45186, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.13.9-r0, 1.14.5-r1, 1.14.5-r2

Multiple security vulnerabilities affect the ingress-nginx-controller-1.13 package. These issues are resolved in later releases. See references for individual vulnerability details...

9.6CVSS5.8AI score0.00655EPSS

SaveExploits1References29

OSV•added 2026/07/13 7:4 a.m.•4 views

CLEANSTART-2026-HJ99696 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507 applied in versions: 1.14.5-r1

Multiple security vulnerabilities affect the ingress-nginx-controller-1.14 package. These issues are resolved in later releases. See references for individual vulnerability details...

9.6CVSS6.1AI score0.00655EPSS

SaveExploits0References21

Chainguard•added 2026/07/09 8:31 p.m.•14 views

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: docker-fips, elastic-agent-fips, azuredisk-csi-fips, frankenphp-8.2, kubernetes-csi-node-driver-registrar, libnvidia-container, ocm-cli-fips, melange, prometheus-fips, pinact, zarf, commercial-grafana, elastic-agent, grafana-alloy, azurefile-csi, consul-fips, redka,...

5.8AI score

SaveExploits0