golang-github-prometheus-alertmanager vulnerabilities (SUSE)
103 vulnerabilities.
golang-github-prometheus-alertmanagerSUSEGrafana SQL Expressions allow for remote code execution9.4 Criticalgolang-github-prometheus-alertmanagerSUSEDenial of service via malicious preflight requests in github.com/rs/cors7.5 Highgolang-github-prometheus-alertmanagerSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highgolang-github-prometheus-alertmanagerSUSEUsers outside an organization can delete a snapshot with its key6.5 Mediumgolang-github-prometheus-alertmanagerSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Mediumgolang-github-prometheus-alertmanagerSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 Highgolang-github-prometheus-alertmanagerSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumgolang-github-prometheus-alertmanagerSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalgolang-github-prometheus-alertmanagerSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumgolang-github-prometheus-alertmanagerSUSEGrafana Missing Synchronization vulnerability7.5 Highgolang-github-prometheus-alertmanagerSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumgolang-github-prometheus-alertmanagerSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumgolang-github-prometheus-alertmanagerSUSEGrafana vulnerable to Cross-site Scripting7.3 Highgolang-github-prometheus-alertmanagerSUSEGrafana vulnerable to Cross-site Scripting7.3 Highgolang-github-prometheus-alertmanagerSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highgolang-github-prometheus-alertmanagerSUSEGrafana stored XSS in FileUploader component7.3 Highgolang-github-prometheus-alertmanagerSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumgolang-github-prometheus-alertmanagerSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumgolang-github-prometheus-alertmanagerSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumgolang-github-prometheus-alertmanagerSUSEGrafana contains Improper Input Validation6.4 Mediumgolang-github-prometheus-alertmanagerSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumgolang-github-prometheus-alertmanagerSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumgolang-github-prometheus-alertmanagerSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumgolang-github-prometheus-alertmanagerSUSEGrafana plugin signature bypass vulnerability6.1 Mediumgolang-github-prometheus-alertmanagerSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highgolang-github-prometheus-alertmanagerSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgolang-github-prometheus-alertmanagerSUSEGrafana folders admin only permission privilege escalation7.6 Highgolang-github-prometheus-alertmanagerSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumgolang-github-prometheus-alertmanagerSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highgolang-github-prometheus-alertmanagerSUSEGrafana account takeover via OAuth vulnerability7.1 Highgolang-github-prometheus-alertmanagerSUSEStored XSS in Grafana's Unified Alerting7.3 Highgolang-github-prometheus-alertmanagerSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumgolang-github-prometheus-alertmanagerSUSEPrototype Pollution in async7.8 Highgolang-github-prometheus-alertmanagerSUSEgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 Highgolang-github-prometheus-alertmanagerSUSEUncontrolled Resource Consumption in promhttp7.5 Highgolang-github-prometheus-alertmanagerSUSEExposure of Sensitive Information in Grafana4.3 Mediumgolang-github-prometheus-alertmanagerSUSECross Site Request Forgery in Grafana6.3 Mediumgolang-github-prometheus-alertmanagerSUSECross site scripting in Grafana proxy6.5 Mediumgolang-github-prometheus-alertmanagerSUSEOAuth Identity Token exposure in Grafana4.3 Mediumgolang-github-prometheus-alertmanagerSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 Highgolang-github-prometheus-alertmanagerSUSEGrafana directory traversal for `.cvs` files4.3 Mediumgolang-github-prometheus-alertmanagerSUSEDirectory Traversal in Grafana4.3 Mediumgolang-github-prometheus-alertmanagerSUSEGrafana path traversal7.5 Highgolang-github-prometheus-alertmanagerSUSECross organization admin control in Grafana9.1 Criticalgolang-github-prometheus-alertmanagerSUSEPrototype Pollution in kriszyp/json-schema9.8 Criticalgolang-github-prometheus-alertmanagerSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumgolang-github-prometheus-alertmanagerSUSESnapshot authentication bypass in grafana9.8 Criticalgolang-github-prometheus-alertmanagerSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highgolang-github-prometheus-alertmanagerSUSESM2 Decryption Buffer Overflow9.8 Criticalgolang-github-prometheus-alertmanagerSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 High- Show moreLoading…