Lucene search
K

30 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-14330

Malware in sbrugna...

8.5CVSS8.6AI score0.00726EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-2002

Malware in sbrugna...

4.1CVSS4.5AI score0.00183EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-2095

Malware in sbrugna...

4.9CVSS5.2AI score0.00379EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-2120

Malware in sbrugna...

3.5CVSS4AI score0.00505EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-3689

Malicious code in bioql PyPI...

6.5CVSS5.8AI score0.00797EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-2793

Malicious code in bioql PyPI...

8.8CVSS7.6AI score0.00762EPSS
Exploits1References16
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-1661

Malicious code in bioql PyPI...

6.2CVSS6.5AI score0.00039EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-7150

Malicious code in bioql PyPI...

3.1CVSS4.9AI score0.00007EPSS
Exploits0References4
Broadcom
Broadcom
added 2025/04/24 12:0 a.m.15 views

Ingress-nginx admission controller RCE escalation (CVE-2025-1974)

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

9.8CVSS7.7AI score0.91918EPSS
Exploits20
Vaadin
Vaadin
added 2025/03/31 12:0 a.m.41 views

Ingress-Nginx Admission Controller RCE Escalation

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

9.8CVSS7.7AI score0.91918EPSS
Exploits20Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/26 12:0 a.m.170 views

Ingress-NGINX controller < 1.11.5 / 1.12 < 1.12.1 Multiple Vulnerabilities

The version of Ingres-NGINX controller installed on the remote host is prior to 1.11.5/1.12.1. It is, therefore, affected by multiple vulnerabilities as referenced as Ingress Nightmare. - A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker wit...

9.8CVSS7.6AI score0.91918EPSS
Exploits21References6
OSV
OSV
added 2025/03/25 12:30 a.m.31 views

GHSA-MGVX-RPFC-9MPV ingress-nginx admission controller RCE escalation

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

9.8CVSS8AI score0.91918EPSS
Exploits20References10
Github Security Blog
Github Security Blog
added 2025/03/25 12:30 a.m.30 views

ingress-nginx admission controller RCE escalation

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

9.8CVSS8AI score0.91918EPSS
Exploits20References10Affected Software1
NVD
NVD
added 2025/03/25 12:15 a.m.24 views

CVE-2025-1974

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

9.8CVSS0.91918EPSS
Exploits20References4
CVE
CVE
added 2025/03/24 11:28 p.m.584 views

CVE-2025-1974

CVE-2025-1974 affects the Ingress-NGINX controller in Kubernetes, enabling unauthenticated code execution when a pod-network–reachable attacker can reach the admission/controller path. Public exploits exist (Ingress-NGINX Admission Controller RCE and related PoCs), with published exploit details ...

9.8CVSS8.1AI score0.91918EPSS
Exploits20References4
Github Security Blog
Github Security Blog
added 2025/03/20 6:30 p.m.9 views

Kubernetes kube-apiserver Vulnerable to Race Condition

A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies ...

3.1CVSS7.2AI score0.00007EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/03/20 5:15 p.m.4 views

CVE-2024-7598

A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies ...

3.1CVSS7.2AI score
Exploits0References3
NVD
NVD
added 2025/03/20 5:15 p.m.9 views

CVE-2024-7598

A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies ...

3.1CVSS0.00007EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/20 4:52 p.m.15 views

CVE-2024-7598 Network restriction bypass via race condition during namespace termination

A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies ...

3.1CVSS0.00007EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/03/20 4:52 p.m.5 views

CVE-2024-7598

A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies ...

3.1CVSS5.6AI score0.00007EPSS
Exploits0
Rows per page
Query Builder