prometheus-postgres_exporter vulnerabilities (SUSE)
89 vulnerabilities.
-
prometheus-postgres_exporterSUSE Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
prometheus-postgres_exporterSUSE Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
prometheus-postgres_exporterSUSE Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
prometheus-postgres_exporterSUSE Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
prometheus-postgres_exporterSUSE Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
prometheus-postgres_exporterSUSE IDOR in Annotations API allows unprivileged users to DELETE annotation 4.3 Medium -
prometheus-postgres_exporterSUSE Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro 6.5 Medium -
prometheus-postgres_exporterSUSE Grafana plugin resources can lead to unbounded memory allocation 6.5 Medium -
prometheus-postgres_exporterSUSE Auth Proxy IPv6 whitelist bypass 7.4 High -
prometheus-postgres_exporterSUSE SQL Expressions Read File From Disk 6.3 Medium -
prometheus-postgres_exporterSUSE BAC in Snapshot API allows deletion of unauthorized dashboard snapshots 6.5 Medium -
prometheus-postgres_exporterSUSE Users can generate Service Account tokens after permissions removal 5.9 Medium -
prometheus-postgres_exporterSUSE Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin 7.1 High -
prometheus-postgres_exporterSUSE Grafana Live push endpoint allows unbounded memory allocation leading to OOM 6.5 Medium -
prometheus-postgres_exporterSUSE Viewer-triggered race condition in Grafana Live leads to complete server crash 6.5 Medium -
prometheus-postgres_exporterSUSE Prometheus: remote read endpoint allows denial of service via crafted snappy payload 7.5 High -
prometheus-postgres_exporterSUSE Prometheus Azure AD remote write OAuth client secret exposed via config API 7.5 High -
prometheus-postgres_exporterSUSE Apache Thrift: Go TFramedTransport uint32 overflow 7.5 High -
prometheus-postgres_exporterSUSE Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer 5.3 Medium -
prometheus-postgres_exporterSUSE Go JOSE affect by a panic in JWE decryption 7.5 High -
prometheus-postgres_exporterSUSE Rollup 4 has Arbitrary File Write via Path Traversal 8.8 High -
prometheus-postgres_exporterSUSE Public Dashboards time range restriction on annotations can be bypassed 5.3 Medium -
prometheus-postgres_exporterSUSE jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions 9.2 Critical -
prometheus-postgres_exporterSUSE Uncontrolled Resource Consumption in @isaacs/brace-expansion 9.2 Critical -
prometheus-postgres_exporterSUSE JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js 9.8 Critical -
prometheus-postgres_exporterSUSE Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
prometheus-postgres_exporterSUSE Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
prometheus-postgres_exporterSUSE Tornado vulnerable to Header Injection and XSS via reason argument 5.4 Medium -
prometheus-postgres_exporterSUSE Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
prometheus-postgres_exporterSUSE Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
prometheus-postgres_exporterSUSE Grafana's insecure DingDing Alert integration exposes sensitive information 4.3 Medium -
prometheus-postgres_exporterSUSE HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
prometheus-postgres_exporterSUSE HTTP/2 CONTINUATION flood in net/http 7.5 High -
prometheus-postgres_exporterSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
prometheus-postgres_exporterSUSE jose4j uses weak cryptographic algorithm 7.5 High -
prometheus-postgres_exporterSUSE Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint 7.5 High -
prometheus-postgres_exporterSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
prometheus-postgres_exporterSUSE Grafana vulnerable to Authentication Bypass by Spoofing 9.4 Critical -
prometheus-postgres_exporterSUSE Grafana has Broken Access Control in Alert manager: Viewer can send test alerts 4.1 Medium -
prometheus-postgres_exporterSUSE Grafana Missing Synchronization vulnerability 7.5 High -
prometheus-postgres_exporterSUSE Grafana is an open-source platform for monitoring and observability. Starting with the 9.1... 4.2 Medium -
prometheus-postgres_exporterSUSE Stored XSS in Graphite FunctionDescription tooltip 6.2 Medium -
prometheus-postgres_exporterSUSE Grafana vulnerable to Cross-site Scripting 7.3 High -
prometheus-postgres_exporterSUSE Grafana vulnerable to Cross-site Scripting 7.3 High -
prometheus-postgres_exporterSUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
prometheus-postgres_exporterSUSE Grafana stored XSS in FileUploader component 7.3 High -
prometheus-postgres_exporterSUSE Grafana vulnerable to spoofing originalUrl of snapshots 6.7 Medium -
prometheus-postgres_exporterSUSE Prometheus Exporter Toolkit vulnerable to basic authentication bypass 6.2 Medium -
prometheus-postgres_exporterSUSE Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password 6.7 Medium -
prometheus-postgres_exporterSUSE Grafana contains Improper Input Validation 6.4 Medium - Show olderLoading…