Lucene search
+L

320 matches found

OSV
OSV
added 2020/12/21 12:51 p.m.11 views

SUSE-SU-2020:3897-1 Security update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark

This update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila,...

9.8CVSS8.8AI score0.4478EPSS
SaveExploits9References16
Tenable Nessus
Tenable Nessus
added 2020/12/21 12:0 a.m.31 views

Debian DLA-2501-1 : influxdb security update

An issue has been found in influxdb, a scalable datastore for metrics, events, and real-time analytics. By using a JWT token with an empty shared secret, one is able to bypass authentication in services/httpd/handler.go. For Debian 9 stretch, this problem has been fixed in version...

9.8CVSS7.8AI score0.30921EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2020/12/21 12:0 a.m.26 views

Debian: Security Advisory (DLA-2501-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.30921EPSS
SaveExploits3References4
Debian
Debian
added 2020/12/20 8:28 a.m.65 views

[SECURITY] [DLA 2501-1] influxdb security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2501-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 20, 2020 https://wiki.debian.org/LTS -...

9.8CVSS9.5AI score0.30921EPSS
SaveExploits3
OSV
OSV
added 2020/12/20 12:0 a.m.23 views

DLA-2501-1 influxdb - security update

Bulletin has no description...

9.8CVSS9.4AI score0.30921EPSS
SaveExploits3
Gitee
Gitee
added 2020/12/18 5:12 p.m.7 views

vulhub

It is an offensive tool for Docker environments. The repository contains a collection of vulnerable Docker environments, which can be used for testing and training purposes. The environments are pre-built and can be easily deployed using Docker and Docker Compose. The repository includes a variet...

6.8AI score
SaveExploits0
CNNVD
CNNVD
added 2020/12/16 12:0 a.m.9 views

Docker Image influxdb Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

7.3AI score
SaveExploits1References2
Gitee
Gitee
added 2020/12/13 11:17 p.m.6 views

vulhub

It is an offensive tool for Docker environments. The primary vulnerability is not specified, but the repository contains a collection of vulnerable Docker environments, including CouchDB, FFmpeg, Git, InfluxDB, and others. The environments are designed to be vulnerable to various attacks, allowin...

7AI score
SaveExploits0
Gitee
Gitee
added 2020/12/13 1:43 a.m.4 views

vulhub1

It is an offensive tool for web application security training. The repository contains a collection of vulnerable docker environments for web application security training. The tool is designed to be easy to use, requiring only two simple commands to set up a vulnerable environment. The tool is...

7.1AI score
SaveExploits0
Gitee
Gitee
added 2020/12/11 1:50 p.m.6 views

vulhub

It is an offensive tool for Docker environments. The repository contains a collection of vulnerable Docker environments, including CouchDB, FFmpeg, Git, InfluxDB, and Oracle Java. The environments are designed to be used for testing and training purposes, allowing users to practice exploiting...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/12/10 12:0 a.m.34 views

Photon OS 3.0: Influxdb PHSA-2020-3.0-0172

An update of the influxdb package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0172. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.8CVSS8.7AI score0.30921EPSS
SaveExploits3References2
Photon
Photon
added 2020/12/07 12:0 a.m.33 views

Critical Photon OS Security Update - PHSA-2020-0172

Updates of 'influxdb' packages of Photon OS have been released...

7.5CVSS1.6AI score0.30921EPSS
SaveExploits3
Photon
Photon
added 2020/12/07 12:0 a.m.44 views

Critical Photon OS Security Update - PHSA-2020-3.0-0172

Updates of 'influxdb' packages of Photon OS have been released...

9.8CVSS1.6AI score0.30921EPSS
SaveExploits3
OSV
OSV
added 2020/12/04 11:50 a.m.10 views

SUSE-SU-2020:3624-1 Security update for crowbar-openstack, grafana, influxdb, python-urllib3

This update for crowbar-openstack, grafana, influxdb, python-urllib3 contains the following fixes: Security fixes included in this update: openstack-glance - CVE-2016-8611: Added rate limiting for glance api bnc1005886 grafana - CVE-2020-24303: Fixed an XSS via a query alias for the ElasticSearch...

9.8CVSS7.3AI score0.30921EPSS
SaveExploits4References11
Gitee
Gitee
added 2020/11/26 12:56 a.m.4 views

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments. It is an offensive tool for web application security testing. The primary CVE ID present in the context is not explicitly stated, but the repository contains various vulnerable environments, including ones...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2020/11/20 6:22 p.m.29 views

CVE-2019-20933

An authentication bypass vulnerability was found in InfluxDB. By default, when using JWT authentication, InfluxDB does not generate a signing secret or state in the documentation that a JWT secret must be generated. If InfluxDB is left in the default state, this flaw allows an attacker to generat...

9.8CVSS1.3AI score0.30921EPSS
SaveExploits3References4
NVD
NVD
added 2020/11/19 2:15 a.m.26 views

CVE-2019-20933

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret...

9.8CVSS9.7AI score0.30921EPSS
SaveExploits3References5
OSV
OSV
added 2020/11/19 2:15 a.m.26 views

CVE-2019-20933

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret...

9.8CVSS6.9AI score
SaveExploits0References5
OSV
OSV
added 2020/11/19 2:15 a.m.2 views

DEBIAN-CVE-2019-20933

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret...

9.8CVSS7.3AI score0.30921EPSS
SaveExploits3References1
UbuntuCve
UbuntuCve
added 2020/11/19 2:15 a.m.47 views

CVE-2019-20933

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret...

9.8CVSS6.9AI score0.30921EPSS
SaveExploits3References5
Rows per page
Query Builder