Vulnerabilities

Last updated 31 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
kubevirt.io/kubevirt KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled VMI IP address Medium Risk 6.4 4 months ago 4 hours ago
kubevirt.io/kubevirt KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite Medium Risk 4.2 4 months ago 4 hours ago
kubevirt.io/kubevirt KubeVirt has a Link Following issue High Risk 7.7 5 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt's authorization mechanism improperly truncates subresource names Medium Risk 5.4 6 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt Arbitrary Container File Read Medium Risk 6.5 12 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt has a Link Following vulnerability Critical 9.9 5 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt's Improper TLS Certificate Management Handling Allows API Identity Spoofing Medium Risk 4.7 12 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes Medium Risk 5.0 12 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer Medium Risk 4.7 12 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt Vulnerable to Arbitrary Host File Read and Write High Risk 7.7 12 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes Medium Risk 5.3 12 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation Medium Risk 5.3 12 months ago 1 month ago
kubevirt.io/kubevirt kubevirt allows a local attacker to execute arbitrary code via a crafted command Medium Risk 5.9 2 years ago 1 month ago
kubevirt.io/kubevirt KubeVirt NULL pointer dereference flaw Medium Risk 6.5 2 years ago 1 month ago
kubevirt.io/kubevirt KubeVirt vulnerable to arbitrary file read on host High Risk 8.0 4 years ago 1 month ago
kubevirt.io/kubevirt KubeVirt Guest Agent DoS via Excessive Network Interface Reports Medium Risk 6.4 9 months ago 1 month ago
kubevirt.io/kubevirt KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt Unknown 4 months ago 4 months ago
kubevirt.io/kubevirt KubeVirt has a Link Following issue in kubevirt.io/kubevirt Unknown 4 months ago 4 months ago
kubevirt.io/kubevirt KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt Unknown 4 months ago 4 months ago
kubevirt.io/kubevirt KubeVirt NULL pointer dereference flaw in kubevirt.io/kubevirt Unknown 2 years ago 4 months ago
kubevirt.io/kubevirt KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation in kubevirt.io/kubevirt Unknown 11 months ago 4 months ago
kubevirt.io/kubevirt KubeVirt Guest Agent DoS via Excessive Network Interface Reports in kubevirt.io/kubevirt Unknown 9 months ago 4 months ago
kubevirt.io/kubevirt kubevirt allows a local attacker to execute arbitrary code via a crafted command in kubevirt.io/kubevirt Unknown 2 years ago 4 months ago
kubevirt.io/kubevirt KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes in kubevirt.io/kubevirt Unknown 11 months ago 7 months ago
kubevirt.io/kubevirt KubeVirt Vulnerable to Arbitrary Host File Read and Write in kubevirt.io/kubevirt Unknown 11 months ago 7 months ago
kubevirt.io/kubevirt KubeVirt Arbitrary Container File Read in kubevirt.io/kubevirt Unknown 11 months ago 7 months ago
kubevirt.io/kubevirt KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer in kubevirt.io/kubevirt Unknown 11 months ago 7 months ago
kubevirt.io/kubevirt KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing in kubevirt.io/kubevirt Unknown 11 months ago 7 months ago
kubevirt.io/kubevirt KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt Unknown 2 years ago 7 months ago
kubevirt.io/kubevirt Privilege Escalation in kubevirt in kubevirt.io/kubevirt Unknown 2 years ago 8 months ago
kubevirt.io/kubevirt Permissions bypass in KubeVirt in kubevirt.io/kubevirt Unknown 2 years ago 8 months ago
kubevirt.io/kubevirt Privilege Escalation in kubevirt Critical 9.9 2 years ago 2 years ago
kubevirt.io/kubevirt Permissions bypass in KubeVirt Medium Risk 6.5 5 years ago 2 years ago
kubevirt.io/kubevirt On a compromised node, the virt-handler service account can be used to modify all node specs High Risk 8.2 3 years ago 2 years ago