271 matches found
Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication
A set of five critical security shortcomings have been disclosed in the Ingress NGINX Controller for Kubernetes that could result in unauthenticated remote code execution, putting over 6,500 clusters at immediate risk by exposing the component to the public internet. The vulnerabilities...
Kubernetes ingress-nginx 输入验证错误漏洞
Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that can be exploited by an attacker to gain access to sensitive data such as credentials and keys across...
GHSA-JFVP-7X6P-H2PV vulnerabilities
Vulnerabilities for packages: k3s, syft, neuvector-scanner, runc, podman, docker, buildah, grafana-alloy, k8s-device-plugin, kubernetes, opentelemetry-collector-contrib, grype, ctop, cadvisor...
CVE-2024-45310 vulnerabilities
Vulnerabilities for packages: k3s, syft, neuvector-scanner, runc, podman, docker, buildah, grafana-alloy, k8s-device-plugin, kubernetes, opentelemetry-collector-contrib, grype, ctop, cadvisor...
CVE-2024-45310 vulnerabilities
Vulnerabilities for packages: docker, opentelemetry-collector-contrib, k3s, grafana-alloy-fips, cluster-autoscaler-fips, opentelemetry-collector-contrib-fips, eks-distro-fips, grafana-alloy, neuvector-scanner, grype, buildah, cadvisor-fips, cluster-autoscaler, k8s-device-plugin, runc,...
Ingress NGINX Controller 安全漏洞
Ingress NGINX Controller is a Kubernetes open source entry controller for Kubernetes. A security vulnerability exists in Ingress NGINX Controller versions prior to 1.11.2, which stems from a participant with permission to create Ingress objects can bypass annotation validation to inject arbitrary...
CVE-2024-34161 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
CVE-2024-35200 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
CVE-2024-31079 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
CVE-2024-3154 vulnerabilities
Vulnerabilities for packages: cadvisor-fips, ctop, opentelemetry-collector-contrib, wolfictl, neuvector-scanner, grype, kubernetes, cadvisor, opentelemetry-collector-contrib-fips, buildah...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: doppler-kubernetes-operator, prometheus-redis-exporter, restic, dex, terraform, grafana-operator, kubernetes-csi-external-resizer, kube-bench, prometheus-beat-exporter-fips, terraform-provider-azurerm, timoni, cilium-cli, falcosidekick, goreleaser,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: doppler-kubernetes-operator, prometheus-redis-exporter, restic, dex, terraform, grafana-operator, kubernetes-csi-external-resizer, kube-bench, prometheus-beat-exporter-fips, terraform-provider-azurerm, timoni, cilium-cli, falcosidekick, goreleaser,...
CVE-2024-21626 vulnerabilities
Vulnerabilities for packages: docker, k3d, k9s, zarf, k3s, buildkitd, skopeo, kaniko, skaffold, kubescape, wolfictl, nerdctl, grype, trivy, runc, kots, kubernetes, cadvisor, syft, newrelic-infrastructure-agent, zot, ctop, podman...
CVE-2024-21626 vulnerabilities
Vulnerabilities for packages: k9s, k3s, syft, buildkitd, zarf, trivy, docker, nerdctl, cadvisor, k3d, zot, skaffold, kubescape, grype, ctop, kaniko, runc, wolfictl, newrelic-infrastructure-agent, kots, skopeo, kubernetes, podman...
The vulnerability of the _nginxCmd() function of the Nginx web server control software, specifically the strong-nginx-controller, allows attackers to execute arbitrary commands.
The vulnerability of the nginxCmd function of the Nginx web server control software exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
GHSA-5WJ4-WFFQ-3378 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-5WJ4-WFFQ-3378 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-FP9F-44C2-CW27 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...