Kubernetes
Approved changes feed: RSS · Atom
cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Kubernetes (3ee05930-9e42-51b2-ad52-30832f573b15) |
|---|---|
| Product | Kubernetes (1a2d2535-9ff1-599e-92b3-aa33ed592780) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:code.google/kubernetes |
purl2cpe | 2026-06-01 10:13:27.569201 |
pkg:github/kubernetes/kubernetes |
purl2cpe | 2026-06-01 10:13:27.569202 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-33519 |
not_vulnerable | 2026-06-08 07:59:10.259821 |
Incorrect privilege assignment in Portal for ArcGIS
CRITICAL (9.8)
An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to developer credentials.
Published: 2026-04-21T20:38:28.573Z
Updated: 2026-04-23T03:56:07.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22549 |
not_vulnerable | 2026-06-08 07:51:13.027372 |
BIG-IP Container Ingress Services vulnerability
MEDIUM (4.9)
A vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions to read cluster secrets. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2026-02-04T15:15:36.466Z
Updated: 2026-02-04T15:58:22.668Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57870 |
not_vulnerable | 2026-06-08 07:33:16.251971 |
BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.
CRITICAL (10)
A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on Windows, Linux and Kubernetes. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary SQL commands via a specific ArcGIS Feature Service operation. Successful exploitation can potentially result in unauthorized access, modification, or deletion of data from the underlying Enterprise Geodatabase.
Published: 2025-10-22T14:26:22.857Z
Updated: 2026-02-26T16:57:13.694Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3177 |
vulnerable | 2026-06-08 06:41:52.637305 |
Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin
LOW (2.7)
A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.
Published: 2024-04-22T23:00:39.702Z
Updated: 2024-09-10T20:48:09.780Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25740 |
vulnerable | 2026-06-08 05:30:41.529858 |
Holes in EndpointSlice Validation Enable Host Network Hijack
LOW (3.1)
A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.
Published: 2021-09-20T17:05:18.065Z
Updated: 2026-06-01T21:45:55.645Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7075 |
vulnerable | 2026-06-08 05:08:11.706271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1906 |
vulnerable | 2026-06-08 05:07:32.276298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1905 |
vulnerable | 2026-06-08 05:07:32.275896 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7561 |
vulnerable | 2026-06-08 05:07:01.379659 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.