prometheus-blackbox_exporter vulnerabilities (SUSE)
107 vulnerabilities.
prometheus-blackbox_exporterSUSEInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1 Mediumprometheus-blackbox_exporterSUSEInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 Mediumprometheus-blackbox_exporterSUSEInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumprometheus-blackbox_exporterSUSEInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 Mediumprometheus-blackbox_exporterSUSEInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 Mediumprometheus-blackbox_exporterSUSEIDOR in Annotations API allows unprivileged users to DELETE annotation4.3 Mediumprometheus-blackbox_exporterSUSEGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro6.5 Mediumprometheus-blackbox_exporterSUSEGrafana plugin resources can lead to unbounded memory allocation6.5 Mediumprometheus-blackbox_exporterSUSEAuth Proxy IPv6 whitelist bypass7.4 Highprometheus-blackbox_exporterSUSESQL Expressions Read File From Disk6.3 Mediumprometheus-blackbox_exporterSUSEBAC in Snapshot API allows deletion of unauthorized dashboard snapshots6.5 Mediumprometheus-blackbox_exporterSUSEUsers can generate Service Account tokens after permissions removal5.9 Mediumprometheus-blackbox_exporterSUSEDashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin7.1 Highprometheus-blackbox_exporterSUSEGrafana Live push endpoint allows unbounded memory allocation leading to OOM6.5 Mediumprometheus-blackbox_exporterSUSEViewer-triggered race condition in Grafana Live leads to complete server crash6.5 Mediumprometheus-blackbox_exporterSUSEPrometheus: remote read endpoint allows denial of service via crafted snappy payload7.5 Highprometheus-blackbox_exporterSUSEPrometheus Azure AD remote write OAuth client secret exposed via config API7.5 Highprometheus-blackbox_exporterSUSEApache Thrift: Go TFramedTransport uint32 overflow7.5 Highprometheus-blackbox_exporterSUSEPrometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer5.3 Mediumprometheus-blackbox_exporterSUSEGo JOSE affect by a panic in JWE decryption7.5 Highprometheus-blackbox_exporterSUSEQuery resampling can cause unbounded memory allocations6.5 Mediumprometheus-blackbox_exporterSUSEGrafana Testdata datasource can issue unbounded memory allocations6.5 Mediumprometheus-blackbox_exporterSUSERCE on Grafana via sqlExpressions9.1 Criticalprometheus-blackbox_exporterSUSEPublic dashboards discloses all direct mode datasources6.5 Mediumprometheus-blackbox_exporterSUSEMissing Protected-field Authorization in Provisioning Contact Points API5.4 Mediumprometheus-blackbox_exporterSUSEgRPC-Go has an authorization bypass via missing leading slash in :path9.1 Criticalprometheus-blackbox_exporterSUSEAuthorization Bypass via TOCTOU in Grafana Datasource Deletion by Name2.6 Lowprometheus-blackbox_exporterSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highprometheus-blackbox_exporterSUSEfilippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity1.7 Lowprometheus-blackbox_exporterSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumprometheus-blackbox_exporterSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticalprometheus-blackbox_exporterSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalprometheus-blackbox_exporterSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticalprometheus-blackbox_exporterSUSEDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 Highprometheus-blackbox_exporterSUSEUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 Highprometheus-blackbox_exporterSUSEPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumprometheus-blackbox_exporterSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highprometheus-blackbox_exporterSUSETornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters7.5 Highprometheus-blackbox_exporterSUSETornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing7.5 Highprometheus-blackbox_exporterSUSETornado vulnerable to Header Injection and XSS via reason argument5.4 Mediumprometheus-blackbox_exporterSUSESalt Master authentication protocol downgrade may enable minion impersonation7.5 Highprometheus-blackbox_exporterSUSESalt junos module uses an unsafe YAML loader which may allow unintended code execution7.3 Highprometheus-blackbox_exporterSUSECVE-2025-128168.6 Highprometheus-blackbox_exporterSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumprometheus-blackbox_exporterSUSEGrafana's datasource proxy API allows authorization checks to be bypassed5.0 Mediumprometheus-blackbox_exporterSUSEThe built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor...6.8 Mediumprometheus-blackbox_exporterSUSEIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 Mediumprometheus-blackbox_exporterSUSEgo-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment3.7 Lowprometheus-blackbox_exporterSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 Mediumprometheus-blackbox_exporterSUSEPrivilege escalation vulnerability for Organizations in Grafana5.1 Medium- Show olderLoading…