https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:56:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-00025 bdu:2020-00025 https://cve.radiocsirt.org/vuln/bdu:2020-00025 https://cve.radiocsirt.org/vuln/bell-cve-2019-11253 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-11253 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cleanstart-2025-zg19712 <p><strong>Affected:</strong> CleanStart: containerd</p> <p>Security vulnerability affects the containerd package. Improper input validation in the Kubernetes API server in versions v1.</p> <p><strong>Affected:</strong> CleanStart: containerd</p> <p>Security vulnerability affects the containerd package. Improper input validation in the Kubernetes API server in versions v1.</p> https://cve.radiocsirt.org/vuln/cleanstart-2025-zg19712 https://cve.radiocsirt.org/vuln/euvd-2026-175917 EUVD-2026-175917 https://cve.radiocsirt.org/vuln/euvd-2026-175917 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11253 <p>Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.</p> <p>Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11253 https://cve.radiocsirt.org/vuln/ghsa-pmqp-h87c-mr78 <p><strong>Affected:</strong> Go: k8s.io/kubernetes</p> <p>Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.</p> <p>### Specific Go Packages Affected k8s.io/kubernetes/pkg/apiserver</p> <p><strong>Affected:</strong> Go: k8s.io/kubernetes</p> <p>Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.</p> <p>### Specific Go Packages Affected k8s.io/kubernetes/pkg/apiserver</p> https://cve.radiocsirt.org/vuln/ghsa-pmqp-h87c-mr78 https://cve.radiocsirt.org/vuln/gsd-2019-11253 gsd-2019-11253 https://cve.radiocsirt.org/vuln/gsd-2019-11253 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10901-1 <p>kubernetes-apiserver-1.22.2-21.2 on GA media</p> <p>kubernetes-apiserver-1.22.2-21.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10901-1 https://cve.radiocsirt.org/vuln/rhea-2019:3809 <p>kubernetes: YAML parsing vulnerable to &#34;Billion Laughs&#34; attack, allowing for remote denial of service</p> <p>kubernetes: YAML parsing vulnerable to &#34;Billion Laughs&#34; attack, allowing for remote denial of service</p> https://cve.radiocsirt.org/vuln/rhea-2019:3809 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510