Lucene search
+L

1470 matches found

NVD
NVD
•added 2026/03/27 3:16 p.m.•15 views

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS0.0039EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/03/27 3:16 p.m.•17 views

UBUNTU-CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS6.6AI score0.0039EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/03/27 3:16 p.m.•16 views

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS6.6AI score0.0039EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/27 2:26 p.m.•78 views

CVE-2026-28375

CVE-2026-28375 affects Grafana via the testdata data-source, where a flaw permits unbounded memory allocations, leading to out-of-memory crashes. The connected CVE entry confirms the root cause as unbounded allocations by the testdata data-source, resulting in availability impact (OOM) . The prov...

6.5CVSS6.6AI score0.0039EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/03/27 2:26 p.m.•12 views

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS6.6AI score0.0039EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/27 2:26 p.m.•13 views

CVE-2026-28375 Grafana Testdata datasource can issue unbounded memory allocations

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS6.6AI score0.0039EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/03/27 2:26 p.m.•9 views

Allocation of Resources Without Limits or Throttling

Overview github.com/grafana/grafana/pkg/tsdb is a developer testing tool for Grafana. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the testdata data-source. An attacker can cause the application to crash and become unavailable by...

7.1CVSS6.5AI score0.0039EPSS
SaveExploits0References2
Mend
Mend
•added 2026/03/27 2:26 p.m.•6 views

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

7.1CVSS6.6AI score0.0039EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/03/27 2:26 p.m.•42 views

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS6.6AI score0.0039EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/03/27 2:02 p.m.•68 views

CVE-2026-27877

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

7.5CVSS7.5AI score0.00314EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/03/27 8:51 a.m.•17 views

CVE-2026-33375

A flaw was found in the Grafana MSSQL Data Source Plugin. A low-privileged user, such as a Viewer, can exploit a logic flaw to bypass API restrictions. This allows them to trigger a catastrophic Out-Of-Memory OOM memory exhaustion, leading to the crashing of the host container. This vulnerability...

6.5CVSS6.5AI score0.00451EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/03/27 12:00 a.m.•16 views

PT-2026-28379

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 11.6.14+security01-1.1 Description A testdata data-source can be used to trigger out-of-memory crashes. Recommendations Update to version 11.6.14+security01-1.1...

6.8CVSS6.5AI score0.00451EPSS
SaveExploits0References112
CNNVD
CNNVD
•added 2026/03/27 12:00 a.m.•25 views

Grafana security vulnerabilities

Grafana is a set of open-source monitoring tools developed by Grafana Open Source, which provide a visual monitoring interface. This tool is primarily used for monitoring and analyzing Graphite, InfluxDB, and Prometheus. Grafana has a security vulnerability that can lead to a memory insufficiency...

6.5CVSS6.5AI score0.0039EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/27 12:00 a.m.•5 views

CVE-2026-28375: Uncontrolled Resource Consumption

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS6.6AI score0.0039EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/26 8:05 p.m.•42 views

CVE-2026-33375 Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...

6.5CVSS0.00451EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/26 8:05 p.m.•28 views

CVE-2026-33375

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...

6.5CVSS6.6AI score0.00451EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/26 8:05 p.m.•9 views

CVE-2026-33375 Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...

6.5CVSS6.5AI score0.00451EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/03/26 8:05 p.m.•19 views

CVE-2026-33375 Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...

6.5CVSS6AI score
SaveExploits0References3
Mend
Mend
•added 2026/03/26 8:05 p.m.•16 views

CVE-2026-33375

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...

7.1CVSS6.5AI score0.00451EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/03/26 8:05 p.m.•49 views

CVE-2026-33375

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user Viewer to bypass API restrictions and trigger a catastrophic Out-Of-Memory OOM memory exhaustion, crashing the host container...

6.5CVSS6.5AI score0.00451EPSS
SaveExploits0
Rows per page
Query Builder