CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

252 matches found

Vaadin•added 2025/03/31 12:0 a.m.•44 views

Ingress-Nginx Admission Controller RCE Escalation

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

9.8CVSS7.7AI score0.99098EPSS

Exploits20Affected Software1

Information Security Automation•added 2025/03/27 6:51 p.m.•24 views

About Remote Code Execution – Kubernetes (CVE-2025-1974) vulnerability

About Remote Code Execution - Kubernetes CVE-2025-1974 vulnerability. An unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. In the default...

9.8CVSS9.4AI score0.99098EPSS

Exploits21

NCSC•added 2025/03/27 2:41 p.m.•7 views

Vulnerabilities fixed in Kubernetes Ingress NGINX Controller

Kubernetes has fixed a number of vulnerabilities in the Ingress NGINX Controller. These vulnerabilities allow malicious actors to perform unauthenticated remote code execution RCE. The vulnerabilities are located in the ingress-nginx controller. These vulnerabilities include a critical remote cod...

9.8CVSS9.7AI score0.99098EPSS

Exploits21References6

CNVD•added 2025/03/27 12:0 a.m.•8 views

Remote code execution vulnerability in Ingress NGINX Controller (CNVD-2025-05883)

Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that can be exploited by an attacker to gain access to sensitive data such as credentials and keys across...

9.8CVSS8.1AI score0.99098EPSS

Exploits20References1

CNVD•added 2025/03/27 12:0 a.m.•20 views

Remote code execution vulnerability in Ingress NGINX Controller (CNVD-2025-05884)

8.8CVSS8.1AI score0.31809EPSS

Exploits8References1

CNVD•added 2025/03/27 12:0 a.m.•12 views

Remote Code Execution Vulnerability in Ingress NGINX Controller (CNVD-2025-05885)

Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that stems from the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary...

8.8CVSS8.1AI score0.83066EPSS

Exploits7References1

CNVD•added 2025/03/27 12:0 a.m.•14 views

Remote Code Execution Vulnerability in Ingress NGINX Controller (CNVD-2025-05886)

Ingress NGINX Controller is an open source portal controller that uses NGINX as a reverse proxy and load balancer. Ingress NGINX Controller suffers from a remote code execution vulnerability that stems from auth-tls-match-cn Ingress annotations can be used to inject configurations, which could le...

8.8CVSS8.2AI score0.34677EPSS

Exploits7References1