prometheus-blackbox_exporter vulnerabilities (SUSE)
107 vulnerabilities.
prometheus-blackbox_exporterSUSEGrafana SQL Expressions allow for remote code execution9.4 Criticalprometheus-blackbox_exporterSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highprometheus-blackbox_exporterSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 Highprometheus-blackbox_exporterSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumprometheus-blackbox_exporterSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalprometheus-blackbox_exporterSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumprometheus-blackbox_exporterSUSEGrafana Missing Synchronization vulnerability7.5 Highprometheus-blackbox_exporterSUSEOpen redirect in Tornado6.1 Mediumprometheus-blackbox_exporterSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumprometheus-blackbox_exporterSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumprometheus-blackbox_exporterSUSEGrafana vulnerable to Cross-site Scripting7.3 Highprometheus-blackbox_exporterSUSEGrafana vulnerable to Cross-site Scripting7.3 Highprometheus-blackbox_exporterSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highprometheus-blackbox_exporterSUSEGrafana stored XSS in FileUploader component7.3 Highprometheus-blackbox_exporterSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumprometheus-blackbox_exporterSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumprometheus-blackbox_exporterSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumprometheus-blackbox_exporterSUSEGrafana contains Improper Input Validation6.4 Mediumprometheus-blackbox_exporterSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumprometheus-blackbox_exporterSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumprometheus-blackbox_exporterSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumprometheus-blackbox_exporterSUSEGrafana plugin signature bypass vulnerability6.1 Mediumprometheus-blackbox_exporterSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highprometheus-blackbox_exporterSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highprometheus-blackbox_exporterSUSEGrafana folders admin only permission privilege escalation7.6 Highprometheus-blackbox_exporterSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumprometheus-blackbox_exporterSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highprometheus-blackbox_exporterSUSEGrafana account takeover via OAuth vulnerability7.1 Highprometheus-blackbox_exporterSUSEStored XSS in Grafana's Unified Alerting7.3 Highprometheus-blackbox_exporterSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumprometheus-blackbox_exporterSUSEPrototype Pollution in async7.8 Highprometheus-blackbox_exporterSUSEgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 Highprometheus-blackbox_exporterSUSEUncontrolled Resource Consumption in promhttp7.5 Highprometheus-blackbox_exporterSUSEExposure of Sensitive Information in Grafana4.3 Mediumprometheus-blackbox_exporterSUSECross Site Request Forgery in Grafana6.3 Mediumprometheus-blackbox_exporterSUSECross site scripting in Grafana proxy6.5 Mediumprometheus-blackbox_exporterSUSEOAuth Identity Token exposure in Grafana4.3 Mediumprometheus-blackbox_exporterSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 Highprometheus-blackbox_exporterSUSEGrafana directory traversal for `.cvs` files4.3 Mediumprometheus-blackbox_exporterSUSEDirectory Traversal in Grafana4.3 Mediumprometheus-blackbox_exporterSUSEGrafana path traversal7.5 Highprometheus-blackbox_exporterSUSECross organization admin control in Grafana9.1 Criticalprometheus-blackbox_exporterSUSEPrototype Pollution in kriszyp/json-schema9.8 Criticalprometheus-blackbox_exporterSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumprometheus-blackbox_exporterSUSEAnsible discloses sensitive information in traceback error message5.5 Mediumprometheus-blackbox_exporterSUSESnapshot authentication bypass in grafana9.8 Criticalprometheus-blackbox_exporterSUSEImproper Input Validation and Command Injection in Ansible7.1 Highprometheus-blackbox_exporterSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highprometheus-blackbox_exporterSUSESM2 Decryption Buffer Overflow9.8 Criticalprometheus-blackbox_exporterSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 High- Show moreLoading…