system-user-prometheus vulnerabilities (SUSE)
46 vulnerabilities.
-
system-user-prometheusSUSE Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint 7.5 High -
system-user-prometheusSUSE Grafana vulnerable to Authentication Bypass by Spoofing 9.4 Critical -
system-user-prometheusSUSE Grafana has Broken Access Control in Alert manager: Viewer can send test alerts 4.1 Medium -
system-user-prometheusSUSE Grafana Missing Synchronization vulnerability 7.5 High -
system-user-prometheusSUSE Open redirect in Tornado 6.1 Medium -
system-user-prometheusSUSE Grafana is an open-source platform for monitoring and observability. Starting with the 9.1... 4.2 Medium -
system-user-prometheusSUSE Stored XSS in Graphite FunctionDescription tooltip 6.2 Medium -
system-user-prometheusSUSE Grafana vulnerable to Cross-site Scripting 7.3 High -
system-user-prometheusSUSE Grafana vulnerable to Cross-site Scripting 7.3 High -
system-user-prometheusSUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
system-user-prometheusSUSE Grafana stored XSS in FileUploader component 7.3 High -
system-user-prometheusSUSE Grafana vulnerable to spoofing originalUrl of snapshots 6.7 Medium -
system-user-prometheusSUSE Prometheus Exporter Toolkit vulnerable to basic authentication bypass 6.2 Medium -
system-user-prometheusSUSE Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password 6.7 Medium -
system-user-prometheusSUSE Grafana contains Improper Input Validation 6.4 Medium -
system-user-prometheusSUSE Grafana users with email as a username can block other users from signing in 4.3 Medium -
system-user-prometheusSUSE Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins 6.8 Medium -
system-user-prometheusSUSE Grafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins 4.9 Medium -
system-user-prometheusSUSE Grafana plugin signature bypass vulnerability 6.1 Medium -
system-user-prometheusSUSE Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
system-user-prometheusSUSE Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
system-user-prometheusSUSE Grafana folders admin only permission privilege escalation 7.6 High -
system-user-prometheusSUSE Authentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin 6.6 Medium -
system-user-prometheusSUSE golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
system-user-prometheusSUSE Grafana account takeover via OAuth vulnerability 7.1 High -
system-user-prometheusSUSE Stored XSS in Grafana's Unified Alerting 7.3 High -
system-user-prometheusSUSE Grafana Enterprise datasource network restrictions bypass via HTTP redirects 6.6 Medium -
system-user-prometheusSUSE Prototype Pollution in async 7.8 High -
system-user-prometheusSUSE golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
system-user-prometheusSUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
system-user-prometheusSUSE Exposure of Sensitive Information in Grafana 4.3 Medium -
system-user-prometheusSUSE Cross Site Request Forgery in Grafana 6.3 Medium -
system-user-prometheusSUSE Cross site scripting in Grafana proxy 6.5 Medium -
system-user-prometheusSUSE OAuth Identity Token exposure in Grafana 4.3 Medium -
system-user-prometheusSUSE Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects 8.0 High -
system-user-prometheusSUSE Grafana directory traversal for `.cvs` files 4.3 Medium -
system-user-prometheusSUSE Directory Traversal in Grafana 4.3 Medium -
system-user-prometheusSUSE Grafana path traversal 7.5 High -
system-user-prometheusSUSE Cross organization admin control in Grafana 9.1 Critical -
system-user-prometheusSUSE Prototype Pollution in kriszyp/json-schema 9.8 Critical -
system-user-prometheusSUSE XSS vulnerability allowing arbitrary JavaScript execution 6.9 Medium -
system-user-prometheusSUSE Snapshot authentication bypass in grafana 9.8 Critical -
system-user-prometheusSUSE Inefficient Regular Expression Complexity in chalk/ansi-regex 7.5 High -
system-user-prometheusSUSE SM2 Decryption Buffer Overflow 9.8 Critical -
system-user-prometheusSUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
system-user-prometheusSUSE Regular Expression Denial of Service (ReDoS) 7.5 High