Lucene search
+L

74 matches found

Kitploit
Kitploit
added 2026/09/19 5:44 p.m.21 views

CVE-2021-43798

CVE-2021-43798 Grafana versiones 8.0.0-beta1 hasta 8.3.0 excepto versiones parcheadas es vulnerable a salto de directorio, permitiendo el acceso a archivos locales. Grafana es una plataforma de código abierto para monitoreo y observabilidad. Grafana versiones 8.0.0-beta1 hasta 8.3.0 excepto...

7.5CVSS8.2AI score0.88503EPSS
SaveExploits48References1
BDU FSTEC
BDU FSTEC
added 2026/09/04 12:00 a.m.10 views

The vulnerability of the Grafana monitoring and surveillance platform, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS5.3AI score0.00388EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/08/24 12:00 a.m.68 views

The vulnerability of the Grafana monitoring and observation platform, related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges.

The vulnerability of the Grafana monitoring and observation platform, related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

3.3CVSS5.4AI score0.00227EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.13 views

The vulnerability of the Grafana monitoring and observation platform, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS5.5AI score0.00432EPSS
SaveExploits0References5Affected Software2
Redos
Redos
added 2026/07/08 12:00 a.m.14 views

ROS-20260708-73-0028

The vulnerability of the Grafana monitoring and observation platform’s plugin is related to the unlimited distribution of resources when processing requests to the endpoint. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0
Redos
Redos
added 2026/07/08 12:00 a.m.14 views

ROS-20260708-73-0031

The vulnerability of the $timeGroup macro built into the Grafana monitoring and observation platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0
Redos
Redos
added 2026/07/07 12:00 a.m.11 views

ROS-20260707-73-0057

The vulnerability of the Grafana Live messaging system, a platform for monitoring and surveillance, involves unlimited resource allocation when processing requests to the final destination. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/05/19 12:00 a.m.12 views

Vulnerability of the real-time messaging system of the Grafana Live platform for monitoring and observation. This platform allows a hacker to trigger a service failure.

The vulnerability of the Grafana Live messaging system, a platform for monitoring and surveillance, involves unlimited resource allocation when processing requests to the final destination. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS5.2AI score0.00328EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/19 12:00 a.m.16 views

The vulnerability of the Grafana monitoring and surveillance platform lies in the unauthorized access to the account after the token has expired, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Grafana monitoring and observation platform relates to incorrect access to the account after the token’s expiration period. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.6CVSS5.3AI score0.00331EPSS
SaveExploits0References3Affected Software1
Packet Storm
Packet Storm
added 2026/04/27 12:00 a.m.128 views

📄 SolarEdge 3.0-2021 Cross Site Request Forgery / OOB Injection

SolarEdge version 3.0-2021 suffers from a cross site request forgery vulnerability in the /solaredge-web/p/initClient that can lead to a remote command injection vulnerability. Titles: solaredge-CSRF-OOB-Injection 3.0-2021 web portal Author: nu11secur1tyAI Date: 2026-04-26 Vendor: SolarEdge...

5.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/04/14 12:00 a.m.16 views

The vulnerability of the TM2 Monitoring platform, related to deficiencies in the authentication process, allows attackers to disclose protected information.

The vulnerability of the TM2 Monitoring platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

10CVSS5.7AI score0.0029EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/10 12:00 a.m.9 views

The vulnerability of the monitoring, analysis, and automatic issue resolution platform of Palo Alto Networks Autonomous Digital Experience Manager is related to errors in the certificate validation process. This allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the monitoring, analysis, and automatic issue resolution platform used by Palo Alto Networks Autonomous Digital Experience Manager is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to enhance their privileges and...

8.8CVSS6AI score0.00175EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.16 views

Microcom ZeusWeb 安全漏洞

Microcom ZeusWeb is a remote monitoring platform developed by the Spanish company Microcom. Version 6.1.31 of Microcom ZeusWeb contains a security vulnerability. This vulnerability stems from the injection of XSS payloads into the Email parameter in the “Recover password” section, which may lead ...

6.1CVSS5.6AI score0.00236EPSS
SaveExploits0References4
attackerkb
attackerkb
added 2026/02/03 12:00 a.m.10 views

CVE-2025-63624

SQL Injection vulnerability in Shandong Kede Electronics Co., Ltd IoT smart water meter monitoring platform v.1.0 allows a remote attacker to execute arbitrary code via the imeilist.aspx file...

6.3AI score0.00651EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/01/01 12:00 a.m.13 views

Kopek Reem ReKord Client SQL注入漏洞

Kopek Reem ReKord Client is a centralized monitoring and management platform from Kopek Israel. Kopek Reem ReKord Client suffers from a SQL injection vulnerability that stems from improper neutralization of special elements, which could lead to a SQL injection attack...

7.5CVSS7.8AI score0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/12 3:05 p.m.7 views

CVE-2025-36746 SolarEdge Monitoring Platform contains a XSS upon report deletion

SolarEdge monitoring platform contains a Cross‑Site Scripting XSS flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt...

4.8CVSS5.9AI score0.00168EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/12 3:05 p.m.22 views

CVE-2025-36746

SolarEdge Monitoring Platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt. The affected product is the SolarEdge Monitoring Platform; the vulnerability is trigg...

5.4CVSS5.8AI score0.00168EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/12/12 12:00 a.m.19 views

SolarEdge Monitoring platform 安全漏洞

The SolarEdge Monitoring platform is a monitoring platform from the Israeli company SolarEdge. A security vulnerability exists in the SolarEdge Monitoring platform that stems from a cross-site scripting flaw that could cause a victim's browser to execute malicious code...

5.4CVSS6.2AI score0.00168EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/04 12:00 a.m.13 views

SolisCloud Monitoring Platform 安全漏洞

SolisCloud Monitoring Platform is a monitoring platform from SolisCloud, Inc. A security vulnerability exists in SolisCloud Monitoring Platform that stems from improper access control and could lead to unsafe direct object references...

8.3CVSS6.5AI score0.0026EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.60 views

EUVD-2024-1694

Malicious code in bioql PyPI...

9.1CVSS8AI score0.02888EPSS
SaveExploits0References10
Rows per page
Query Builder