← Back

Kong

kong

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Inf08
inf08
1 CVE
Kong Alpine Docker Image
kong_alpine_docker_image
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-35189
1Kong
1Kong Alpine Docker Image
Jun 17, 2026
Dec 17, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote...Show more
The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.Show less
CVE-2012-6572
1Kong
1Inf08
Apr 29, 2026
Jun 21, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the phptemplate_preprocess_node function in template.php in the Inf08 theme 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with the "administer taxonomy"...Show more
Cross-site scripting (XSS) vulnerability in the phptemplate_preprocess_node function in template.php in the Inf08 theme 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary name.Show less