CVE-2026-75786 SQL Injection in Grafana Integration Endpoint (query.php)

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

CVE-2026-75786

The Pandora FMS software (version 777 onwards ) is vulnerable to an authenticated blind SQL injection due to the unsanitized concatenation of the module parameter in the Grafana datasource endpoint . This vulnerability allows an authenticated attacker to execute SQL commands against the backend d...

CVE-2026-75786 SQL Injection in Grafana Integration Endpoint (query.php)

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

vmalert-operator

VMAlert Operator ⚠️ Proof of Concept Bridge Grafana Aler...

EUVD-2020-2557

Malware in sbrugna...

BIT-GRAFANA-2025-3415

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01,...

CVE-2025-3415

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01,...

CVE-2020-10092

GitLab 12.1 through 12.8.1 allows XSS. A cross-site scripting vulnerability was present in a particular view relating to the Grafana integration...

CVE-2024-11741

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 11.5.0, 11.4.1, 11.3.3, 11.2.6, 11.1.11, 11.0.11 and 10.4.15...

CVE-2020-10092

GitLab 12.1 through 12.8.1 allows XSS. A cross-site scripting vulnerability was present in a particular view relating to the Grafana integration...

PT-2020-11917 · Gitlab +1 · Gitlab +1

Name of the Vulnerable Software and Affected Versions: GitLab versions 12.1 through 12.8.1 Description: A cross-site scripting issue was found in a specific view related to the Grafana integration, allowing for potential exploitation. Recommendations: For versions 12.1 through 12.8.1, update to a...

CVE-2020-10092: Improper Neutralization of Input During Web Page Generation

GitLab 12.1 through 12.8.1 allows XSS. A cross-site scripting vulnerability was present in a particular view relating to the Grafana integration...