Vulnerabilities
Last updated 31 minutes ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled VMI IP address | Medium Risk 6.4 | 4 months ago | 4 hours ago |
|
|
KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite | Medium Risk 4.2 | 4 months ago | 4 hours ago |
|
|
KubeVirt has a Link Following issue | High Risk 7.7 | 5 months ago | 1 month ago |
|
|
KubeVirt's authorization mechanism improperly truncates subresource names | Medium Risk 5.4 | 6 months ago | 1 month ago |
|
|
KubeVirt Arbitrary Container File Read | Medium Risk 6.5 | 12 months ago | 1 month ago |
|
|
KubeVirt has a Link Following vulnerability | Critical 9.9 | 5 months ago | 1 month ago |
|
|
KubeVirt's Improper TLS Certificate Management Handling Allows API Identity Spoofing | Medium Risk 4.7 | 12 months ago | 1 month ago |
|
|
KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes | Medium Risk 5.0 | 12 months ago | 1 month ago |
|
|
KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer | Medium Risk 4.7 | 12 months ago | 1 month ago |
|
|
KubeVirt Vulnerable to Arbitrary Host File Read and Write | High Risk 7.7 | 12 months ago | 1 month ago |
|
|
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes | Medium Risk 5.3 | 12 months ago | 1 month ago |
|
|
KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation | Medium Risk 5.3 | 12 months ago | 1 month ago |
|
|
kubevirt allows a local attacker to execute arbitrary code via a crafted command | Medium Risk 5.9 | 2 years ago | 1 month ago |
|
|
KubeVirt NULL pointer dereference flaw | Medium Risk 6.5 | 2 years ago | 1 month ago |
|
|
KubeVirt vulnerable to arbitrary file read on host | High Risk 8.0 | 4 years ago | 1 month ago |
|
|
KubeVirt Guest Agent DoS via Excessive Network Interface Reports | Medium Risk 6.4 | 9 months ago | 1 month ago |
|
|
KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt | Unknown | 4 months ago | 4 months ago |
|
|
KubeVirt has a Link Following issue in kubevirt.io/kubevirt | Unknown | 4 months ago | 4 months ago |
|
|
KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt | Unknown | 4 months ago | 4 months ago |
|
|
KubeVirt NULL pointer dereference flaw in kubevirt.io/kubevirt | Unknown | 2 years ago | 4 months ago |
|
|
KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation in kubevirt.io/kubevirt | Unknown | 11 months ago | 4 months ago |
|
|
KubeVirt Guest Agent DoS via Excessive Network Interface Reports in kubevirt.io/kubevirt | Unknown | 9 months ago | 4 months ago |
|
|
kubevirt allows a local attacker to execute arbitrary code via a crafted command in kubevirt.io/kubevirt | Unknown | 2 years ago | 4 months ago |
|
|
KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes in kubevirt.io/kubevirt | Unknown | 11 months ago | 7 months ago |
|
|
KubeVirt Vulnerable to Arbitrary Host File Read and Write in kubevirt.io/kubevirt | Unknown | 11 months ago | 7 months ago |
|
|
KubeVirt Arbitrary Container File Read in kubevirt.io/kubevirt | Unknown | 11 months ago | 7 months ago |
|
|
KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer in kubevirt.io/kubevirt | Unknown | 11 months ago | 7 months ago |
|
|
KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing in kubevirt.io/kubevirt | Unknown | 11 months ago | 7 months ago |
|
|
KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt | Unknown | 2 years ago | 7 months ago |
|
|
Privilege Escalation in kubevirt in kubevirt.io/kubevirt | Unknown | 2 years ago | 8 months ago |
|
|
Permissions bypass in KubeVirt in kubevirt.io/kubevirt | Unknown | 2 years ago | 8 months ago |
|
|
Privilege Escalation in kubevirt | Critical 9.9 | 2 years ago | 2 years ago |
|
|
Permissions bypass in KubeVirt | Medium Risk 6.5 | 5 years ago | 2 years ago |
|
|
On a compromised node, the virt-handler service account can be used to modify all node specs | High Risk 8.2 | 3 years ago | 2 years ago |
Page 1