grafana vulnerabilities (SUSE)
350 vulnerabilities.
grafanaSUSEGrafana contains Improper Input Validation6.4 MediumgrafanaSUSEGrafana users with email as a username can block other users from signing in4.3 MediumgrafanaSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 MediumgrafanaSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 MediumgrafanaSUSEGrafana plugin signature bypass vulnerability6.1 MediumgrafanaSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighgrafanaSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighgrafanaSUSEGrafana folders admin only permission privilege escalation7.6 HighgrafanaSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 MediumgrafanaSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighgrafanaSUSEGrafana account takeover via OAuth vulnerability7.1 HighgrafanaSUSEStored XSS in Grafana's Unified Alerting7.3 HighgrafanaSUSEDjango `Trunc()` and `Extract()` database functions vulnerable to SQL Injection9.8 CriticalgrafanaSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 MediumgrafanaSUSEsinatra does not validate expanded path matches7.5 HighgrafanaSUSESQL Injection in Django9.8 CriticalgrafanaSUSEPrototype Pollution in async7.8 HighgrafanaSUSEHTTP Request Smuggling in puma9.1 CriticalgrafanaSUSEgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighgrafanaSUSEUncontrolled Resource Consumption in promhttp7.5 HighgrafanaSUSEExposure of Sensitive Information in Grafana4.3 MediumgrafanaSUSECross Site Request Forgery in Grafana6.3 MediumgrafanaSUSECross site scripting in Grafana proxy6.5 MediumgrafanaSUSEopenstack-barbican Denial of Service vulnerability4.9 MediumgrafanaSUSEBarbican authorization flaw before v14.0.08.1 HighgrafanaSUSEOAuth Identity Token exposure in Grafana4.3 MediumgrafanaSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 HighgrafanaSUSEArbitrary expression injection in Pillow9.8 CriticalgrafanaSUSEOut-of-bounds Read in Pillow6.5 MediumgrafanaSUSEImproper Initialization in Pillow6.5 MediumgrafanaSUSEgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighgrafanaSUSEHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 HighgrafanaSUSEGrafana directory traversal for `.cvs` files4.3 MediumgrafanaSUSEDirectory Traversal in Grafana4.3 MediumgrafanaSUSEGrafana path traversal7.5 HighgrafanaSUSECross organization admin control in Grafana9.1 CriticalgrafanaSUSEPrototype Pollution in kriszyp/json-schema9.8 CriticalgrafanaSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 MediumgrafanaSUSEXSS in the `of` option of the `.position()` util6.5 MediumgrafanaSUSEXSS in `*Text` options of the Datepicker widget6.5 MediumgrafanaSUSEXSS in the `altField` option of the Datepicker widget6.5 MediumgrafanaSUSEAnsible discloses sensitive information in traceback error message5.5 MediumgrafanaSUSESnapshot authentication bypass in grafana9.8 CriticalgrafanaSUSEImproper Input Validation and Command Injection in Ansible7.1 HighgrafanaSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 HighgrafanaSUSEOpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value6.5 MediumgrafanaSUSESM2 Decryption Buffer Overflow9.8 CriticalgrafanaSUSEOpenStack Keystone allows information disclosure during account locking7.5 HighgrafanaSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 HighgrafanaSUSEDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks7.5 High- Show moreLoading…