grafana vulnerabilities (SUSE)
350 vulnerabilities.
grafanaSUSEHTTP Smuggling via Transfer-Encoding Header in Puma6.8 MediumgrafanaSUSEHTTP Smuggling via Transfer-Encoding Header in Puma7.5 HighgrafanaSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 MediumgrafanaSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible5.0 MediumgrafanaSUSEInformation disclosure issue in Active Resource7.5 HighgrafanaSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 MediumgrafanaSUSEPath Traversal in Ansible5.2 MediumgrafanaSUSEGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 MediumgrafanaSUSEGrafana XSS in header column rename6.1 MediumgrafanaSUSEUnsafe object creation in json RubyGem7.5 HighgrafanaSUSECode Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible7.9 HighgrafanaSUSEArgument Injection in Ansible3.9 LowgrafanaSUSEExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible3.9 LowgrafanaSUSEPath Traversal in Ansible4.2 MediumgrafanaSUSEIncorrect Permission Assignment for Critical Resource in Ansible2.2 LowgrafanaSUSEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 MediumgrafanaSUSEExposure of Sensitive Information to an Unauthorized Actor in Ansible3.9 LowgrafanaSUSEAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File5.0 MediumgrafanaSUSEPath Traversal in Ansible7.5 HighgrafanaSUSESQL injection in Django8.8 HighgrafanaSUSEOS Command Injection in ansible7.4 HighgrafanaSUSEHTTP Response Splitting in Puma6.5 MediumgrafanaSUSEcrowbar provision leaks admin password to all nodes in cleartext9.3 CriticalgrafanaSUSESQL injection in Django9.8 CriticalgrafanaSUSEExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible7.3 HighgrafanaSUSEOS Command Injection and Improper Input Validation in ansible7.3 HighgrafanaSUSEImproper Verification of Cryptographic Signature in PySAML27.5 HighgrafanaSUSEUncontrolled Resource Consumption in Pillow7.5 HighgrafanaSUSEBuffer Copy without Checking Size of Input in Pillow9.8 CriticalgrafanaSUSEPCX P mode buffer overflow in Pillow9.8 CriticalgrafanaSUSEOut-of-bounds Read in Pillow7.1 HighgrafanaSUSEHTTP Request Smuggling in Waitress: Invalid whitespace characters in headers7.1 HighgrafanaSUSEHTTP Request Smuggling: Content-Length Sent Twice in Waitress7.1 HighgrafanaSUSEHTTP Request Smuggling: LF vs CRLF handling in Waitress7.1 HighgrafanaSUSEHTTP Request Smuggling: Invalid Transfer-Encoding in Waitress7.1 HighgrafanaSUSEDjango Potential account hijack via password reset form9.8 CriticalgrafanaSUSEInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible5.7 MediumgrafanaSUSEAnsible password prompts could expose passwords6.4 MediumgrafanaSUSEExposure of Sensitive Information to an Unauthorized Actor in ansible5.7 MediumgrafanaSUSERabbitMQ Web Management Plugin DoS via heap overflow4.5 MediumgrafanaSUSEDouble Free in psutil7.5 HighgrafanaSUSEAnsible leaks sensitive information to logs when told not to7.3 HighgrafanaSUSECross-site Scripting in Bootstrap-3-Typeahead6.1 MediumgrafanaSUSEAnsible Uses Plugins That Disclose Credentials7.3 HighgrafanaSUSEDOS attack in Pillow when processing specially crafted image files7.5 HighgrafanaSUSESecurity update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, a…No scoregrafanaSUSEAnsible password prompts could expose passwords6.4 MediumgrafanaSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 HighgrafanaSUSEmemcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str...7.5 HighgrafanaSUSENokogiri Command Injection Vulnerability9.8 Critical- Show moreLoading…