grafana vulnerabilities (SUSE)
350 vulnerabilities.
grafanaSUSESalt junos module uses an unsafe YAML loader which may allow unintended code execution7.3 HighgrafanaSUSECVE-2025-128168.6 HighgrafanaSUSEOpenFGA Improper Policy Enforcement5.8 MediumgrafanaSUSEInfinite parsing loop in golang.org/x/net5.3 MediumgrafanaSUSEQuadratic parsing complexity in golang.org/x/net/html5.3 MediumgrafanaSUSEGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 MediumgrafanaSUSEAn open redirect vulnerability has been identified in Grafana OSS organization switching...4.2 MediumgrafanaSUSEGrafana is vulnerable to XSS attacks through open redirects and path traversal7.6 HighgrafanaSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 MediumgrafanaSUSESensitive headers not cleared on cross-origin redirect in net/http6.8 MediumgrafanaSUSEGrafana's datasource proxy API allows authorization checks to be bypassed5.0 MediumgrafanaSUSEThe built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor...6.8 MediumgrafanaSUSEIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 MediumgrafanaSUSEgo-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment3.7 LowgrafanaSUSEImproper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter7.5 HighgrafanaSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 MediumgrafanaSUSEGo JOSE's Parsing Vulnerable to Denial of Service6.6 MediumgrafanaSUSESecurity update for SUSE Manager Client ToolsNo scoregrafanaSUSEGrafana Alerting VictorOps integration could be exposed to users with Viewer permission4.3 MediumgrafanaSUSEVulnerability when creating log files in github.com/golang/glog7.1 HighgrafanaSUSEgo-git has an Argument Injection via the URL field9.2 CriticalgrafanaSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticalgrafanaSUSEDatabase password leaked by systemd uyuni-server-attestation service5.7 MediumgrafanaSUSEPrivilege escalation vulnerability for Organizations in Grafana5.1 MediumgrafanaSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowgrafanaSUSEGrafana SQL Expressions allow for remote code execution9.4 CriticalgrafanaSUSEGrafana alerting wrong permission on datasource rule write endpoint5.1 MediumgrafanaSUSEDenial of service via malicious preflight requests in github.com/rs/cors7.5 HighgrafanaSUSEHTTP/2 CONTINUATION flood in net/http7.5 HighgrafanaSUSEUsers outside an organization can delete a snapshot with its key6.5 MediumgrafanaSUSEGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumgrafanaSUSEIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 MediumgrafanaSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 MediumgrafanaSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 MediumgrafanaSUSEJinja vulnerable to Cross-Site Scripting (XSS)5.4 MediumgrafanaSUSEAnsible: template injection7.1 HighgrafanaSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 HighgrafanaSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumgrafanaSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 CriticalgrafanaSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 MediumgrafanaSUSEGrafana Missing Synchronization vulnerability7.5 HighgrafanaSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 MediumgrafanaSUSEStored XSS in Graphite FunctionDescription tooltip6.2 MediumgrafanaSUSEGrafana vulnerable to Cross-site Scripting7.3 HighgrafanaSUSEGrafana vulnerable to Cross-site Scripting7.3 HighgrafanaSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighgrafanaSUSEGrafana stored XSS in FileUploader component7.3 HighgrafanaSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 MediumgrafanaSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 MediumgrafanaSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Medium- Show moreLoading…