Lucene search
+L

323 matches found

AlmaLinux
AlmaLinux
added 2022/07/26 12:00 a.m.33 views

Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: OAuth account takeover CVE-2022-31107 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

7.5CVSS7.7AI score0.02546EPSS
SaveExploits0References4
OSV
OSV
added 2022/07/26 12:00 a.m.35 views

ALSA-2022:5716 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: OAuth account takeover CVE-2022-31107 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

7.5CVSS7.3AI score0.02546EPSS
SaveExploits0References4
Fedora
Fedora
added 2022/07/20 1:40 a.m.20 views

[SECURITY] Fedora 35 Update: grafana-7.5.15-3.fc35

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2022/07/13 2:00 a.m.33 views

[SECURITY] Fedora 36 Update: grafana-7.5.15-3.fc36

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

9.3CVSS9AI score0.0995EPSS
SaveExploits4
Snyk
Snyk
added 2022/06/23 9:25 a.m.4 views

Malicious Package

Overview influxdb-client-examples is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/06/02 12:00 a.m.25 views

Ubuntu: Security Advisory (USN-5451-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.30921EPSS
SaveExploits3References2
Ubuntu
Ubuntu
added 2022/05/31 5:43 p.m.86 views

USN-5451-1: InfluxDB vulnerability

Ilya Averyanov discovered that an InfluxDB vulnerability allowed attackers to bypass authentication and gain access to any known database user...

9.8CVSS8AI score0.30921EPSS
SaveExploits3
OSV
OSV
added 2022/05/31 5:43 p.m.7 views

USN-5451-1 influxdb vulnerability

Ilya Averyanov discovered that an InfluxDB vulnerability allowed attackers to bypass authentication and gain access to any known database user...

9.8CVSS7.2AI score0.30921EPSS
SaveExploits3References2
OSV
OSV
added 2022/05/31 1:05 p.m.10 views

MAL-2022-3812 Malicious code in influxdb-client-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92e3f74130d6b59657161386b5b972629a0eb5251ad5cfeaba8c8e6b720fdafc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/05/31 12:00 a.m.44 views

Ubuntu 18.04 LTS / 20.04 LTS : InfluxDB vulnerability (USN-5451-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5451-1 advisory. Ilya Averyanov discovered that an InfluxDB vulnerability allowed attackers to bypass authentication and gain access to any known database user. Tenabl...

9.8CVSS8.1AI score0.30921EPSS
SaveExploits3References2
OSV
OSV
added 2022/05/24 10:01 p.m.45 views

GHSA-W55X-Q3GV-PX85 InfluxDB Reflected Cross-site Scripting

InfluxDB 0.9.5 has Reflected XSS in the admin panel via the Write Data module...

4.8CVSS4.8AI score0.00727EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/05/24 10:01 p.m.29 views

InfluxDB Reflected Cross-site Scripting

InfluxDB 0.9.5 has Reflected XSS in the admin panel via the Write Data module...

4.8CVSS6.2AI score0.00727EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/05/24 10:00 p.m.27 views

GHSA-RV97-R8F7-8WMG Plaintext password storage in Jenkins InfluxDB Plugin

Jenkins InfluxDB Plugin Prior to 1.22 stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.8CVSS8.6AI score0.01763EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/24 10:00 p.m.32 views

Plaintext password storage in Jenkins InfluxDB Plugin

Jenkins InfluxDB Plugin Prior to 1.22 stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.8CVSS3.3AI score0.01763EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/14 1:42 a.m.44 views

GHSA-X5FH-FVVR-892F Grafana XSS Vulnerability

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...

5.4CVSS5.2AI score0.00882EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/05/14 1:42 a.m.24 views

Grafana XSS Vulnerability

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...

5.4CVSS6.2AI score0.00882EPSS
SaveExploits1References5Affected Software1
AlmaLinux
AlmaLinux
added 2022/05/10 6:25 a.m.35 views

Low: grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. The following packages have been upgraded to a later upstream version: grafana 7.5.11. BZ1993214 Security Fixes: grafana: directory traversal vulnerability CVE-2021-43813 For more details...

4.3CVSS2.7AI score0.57499EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/21 12:00 a.m.27 views

Fedora: Security Advisory for grafana (FEDORA-2022-9dd03cab55)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.9AI score0.05994EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2022/04/21 12:00 a.m.38 views

Fedora: Security Advisory for grafana (FEDORA-2022-83405f9d5b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.9AI score0.05994EPSS
SaveExploits2References2
Fedora
Fedora
added 2022/04/20 7:16 p.m.72 views

[SECURITY] Fedora 34 Update: grafana-7.5.15-2.fc34

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

8.8CVSS9AI score0.05994EPSS
SaveExploits2
Rows per page
Query Builder