prometheus-blackbox_exporter vulnerabilities (openSUSE)
46 vulnerabilities.
prometheus-blackbox_exporteropenSUSEgRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation8.7 Highprometheus-blackbox_exporteropenSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highprometheus-blackbox_exporteropenSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumprometheus-blackbox_exporteropenSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticalprometheus-blackbox_exporteropenSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalprometheus-blackbox_exporteropenSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticalprometheus-blackbox_exporteropenSUSEDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 Highprometheus-blackbox_exporteropenSUSEUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 Highprometheus-blackbox_exporteropenSUSEPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumprometheus-blackbox_exporteropenSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highprometheus-blackbox_exporteropenSUSECVE-2025-128168.6 Highprometheus-blackbox_exporteropenSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumprometheus-blackbox_exporteropenSUSEGrafana's datasource proxy API allows authorization checks to be bypassed5.0 Mediumprometheus-blackbox_exporteropenSUSEThe built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor...6.8 Mediumprometheus-blackbox_exporteropenSUSEIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 Mediumprometheus-blackbox_exporteropenSUSEgo-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment3.7 Lowprometheus-blackbox_exporteropenSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 Mediumprometheus-blackbox_exporteropenSUSEPrivilege escalation vulnerability for Organizations in Grafana5.1 Mediumprometheus-blackbox_exporteropenSUSEGrafana SQL Expressions allow for remote code execution9.4 Criticalprometheus-blackbox_exporteropenSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highprometheus-blackbox_exporteropenSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumprometheus-blackbox_exporteropenSUSEOpen redirect in Tornado6.1 Mediumprometheus-blackbox_exporteropenSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highprometheus-blackbox_exporteropenSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumprometheus-blackbox_exporteropenSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highprometheus-blackbox_exporteropenSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highprometheus-blackbox_exporteropenSUSEGrafana folders admin only permission privilege escalation7.6 Highprometheus-blackbox_exporteropenSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumprometheus-blackbox_exporteropenSUSEGrafana account takeover via OAuth vulnerability7.1 Highprometheus-blackbox_exporteropenSUSEStored XSS in Grafana's Unified Alerting7.3 Highprometheus-blackbox_exporteropenSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumprometheus-blackbox_exporteropenSUSEGrafana directory traversal for `.cvs` files4.3 Mediumprometheus-blackbox_exporteropenSUSEDirectory Traversal in Grafana4.3 Mediumprometheus-blackbox_exporteropenSUSEGrafana path traversal7.5 Highprometheus-blackbox_exporteropenSUSECross organization admin control in Grafana9.1 Criticalprometheus-blackbox_exporteropenSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumprometheus-blackbox_exporteropenSUSEAnsible discloses sensitive information in traceback error message5.5 Mediumprometheus-blackbox_exporteropenSUSEImproper Input Validation and Command Injection in Ansible7.1 Highprometheus-blackbox_exporteropenSUSESM2 Decryption Buffer Overflow9.8 Criticalprometheus-blackbox_exporteropenSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 Highprometheus-blackbox_exporteropenSUSEA flaw was found in several ansible modules, where parameters containing credentials, such as...5.5 Mediumprometheus-blackbox_exporteropenSUSEAnsible Exposes Sensitive Information7.5 Highprometheus-blackbox_exporteropenSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumprometheus-blackbox_exporteropenSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumprometheus-blackbox_exporteropenSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumprometheus-blackbox_exporteropenSUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical