320 matches found
USN-5451-1: InfluxDB vulnerability
Ilya Averyanov discovered that an InfluxDB vulnerability allowed attackers to bypass authentication and gain access to any known database user...
MAL-2022-3812 Malicious code in influxdb-client-examples (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92e3f74130d6b59657161386b5b972629a0eb5251ad5cfeaba8c8e6b720fdafc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Ubuntu 18.04 LTS / 20.04 LTS : InfluxDB vulnerability (USN-5451-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5451-1 advisory. Ilya Averyanov discovered that an InfluxDB vulnerability allowed attackers to bypass authentication and gain access to any known database user. Tenabl...
InfluxDB Reflected Cross-site Scripting
InfluxDB 0.9.5 has Reflected XSS in the admin panel via the Write Data module...
GHSA-W55X-Q3GV-PX85 InfluxDB Reflected Cross-site Scripting
InfluxDB 0.9.5 has Reflected XSS in the admin panel via the Write Data module...
GHSA-RV97-R8F7-8WMG Plaintext password storage in Jenkins InfluxDB Plugin
Jenkins InfluxDB Plugin Prior to 1.22 stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
Plaintext password storage in Jenkins InfluxDB Plugin
Jenkins InfluxDB Plugin Prior to 1.22 stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
org.jenkins-ci.plugins:influxdb (>=1.12.1 <=1.12.3) potentially affected by CVE-2021-21701 via org.jenkins-ci.plugins:performance (=3.0)
org.jenkins-ci.plugins:performance MAVEN version =3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:performance and may be impacted: - org.jenkins-ci.plugins:influxdb =1.12.1, =1.12.3 Source cves: CVE-2021-21701 Source advisory...
org.jenkins-ci.plugins:influxdb (>=1.3 <=1.12.3) potentially affected by CVE-2020-2092 via org.jenkins-ci.plugins:robot (=1.6.0)
org.jenkins-ci.plugins:robot MAVEN version =1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:robot and may be impacted: - org.jenkins-ci.plugins:influxdb =1.3, =1.12.3 Source cves: CVE-2020-2092 Source advisory:...
GHSA-X5FH-FVVR-892F Grafana XSS Vulnerability
Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...
Grafana XSS Vulnerability
Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...
Low: grafana security, bug fix, and enhancement update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. The following packages have been upgraded to a later upstream version: grafana 7.5.11. BZ1993214 Security Fixes: grafana: directory traversal vulnerability CVE-2021-43813 For more details...
Fedora: Security Advisory for grafana (FEDORA-2022-83405f9d5b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for grafana (FEDORA-2022-9dd03cab55)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: grafana-7.5.15-2.fc34
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...
[SECURITY] Fedora 35 Update: grafana-7.5.15-2.fc35
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...
Grafana Cross-Site Scripting Vulnerability (CNVD-2022-28802)
Grafana is a set of open source monitoring tools from Grafana Labs that provides a visual monitoring interface. The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus, etc. A cross-site scripting vulnerability exists in Grafana, which stems from the product's failure to...
Grafana Cross-Site Request Forgery Vulnerability
Grafana is an open source monitoring tool from Grafana Labs that provides a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, Prometheus, etc. A cross-site request forgery vulnerability exists in Grafana, which stems from the product's failure to...
com.btc.ep:btc-embeddedplatform (>=1.9.2-beta <=2.5.9), com.qasymphony.ci.jenkins:qtest (>=1.3.0 <=1.4.6) +16 more potentially affected by CVE-2022-25178 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=0.1-beta-5 <=2.17)
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version =0.1-beta-5, =1.9.2-beta, =1.3.0, =1.0, =1.0, =1.0, =0.1-beta-5, =1.12.1, =2.2, =1.0.4, =0.1, =1.0, =2.3, =1.0, =1.5 and more Source cves: CVE-2022-25178 Source advisory: OSV:GHSA-5HFV-MG5X-MV32...