1749 matches found
Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)
Prometheus Blackbox Exporter through 0.17.0 contains a server-side request forgery caused by unsanitized target parameter in /probe, letting attackers perform SSRF attacks, exploit requires sending crafted target parameter. id: CVE-2020-16248 info: name: Prometheus Blackbox Exporter - Server-Side...
Prometheus - Open Redirect
Prometheus 2.23.0 through 2.26.0 and 2.27.0 contains an open redirect vulnerability. To ensure a seamless transition to 2.27.0, the default UI was changed to the new UI with a URL prefixed by /new redirect to /. Due to a bug in the code, an attacker can redirect a user to a malicious site and...
CVE-2026-73500 affecting package prometheus-adapter for versions less than 0.12.0-9
CVE-2026-73500 affecting package prometheus-adapter for versions less than 0.12.0-9. A patched version of the package is available...
EUVD-2026-63114
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...
CVE-2026-76262
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...
CVE-2026-76262
CVE-2026-76262 affects Splunk Enterprise 10.4 versions below 10.4.2 . The Edge Processor SPL2 Preview sidecar exposes its Prometheus metrics endpoint without authentication, allowing any unauthenticated network client to retrieve runtime and build metadata for the sidecar. The vulnerability is li...
GO-2025-3935 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter, prometheus-podman-exporter-fips...
GO-2025-3777 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter, prometheus-podman-exporter-fips...
GO-2023-2020 vulnerabilities
Vulnerabilities for packages: prometheus-alertmanager, promxy...
GO-2025-3600 vulnerabilities
Vulnerabilities for packages: nats-top-fips, nats-server-fips, nats-top, prometheus-nats-exporter, nats-server...
GO-2022-1130 vulnerabilities
Vulnerabilities for packages: kube-state-metrics, prometheus-pushgateway, prometheus-pushgateway-fips...
GO-2026-4833 vulnerabilities
Vulnerabilities for packages: nats-top-fips, k3s, telegraf, nats, kine, nats-fips, prometheus-nats-exporter-fips, rke2-runtime-fips, milvus, nats-top, prometheus-nats-exporter, rke2-runtime...
GO-2026-4835 vulnerabilities
Vulnerabilities for packages: nats-top-fips, k3s, telegraf, nats, kine, nats-fips, prometheus-nats-exporter-fips, rke2-runtime-fips, milvus, nats-top, prometheus-nats-exporter, rke2-runtime...
GO-2026-4834 vulnerabilities
Vulnerabilities for packages: nats-top-fips, k3s, telegraf, nats, kine, nats-fips, prometheus-nats-exporter-fips, rke2-runtime-fips, milvus, nats-top, prometheus-nats-exporter, rke2-runtime...
GO-2026-4828 vulnerabilities
Vulnerabilities for packages: nats-top-fips, k3s, telegraf, nats, kine, nats-fips, prometheus-nats-exporter-fips, rke2-runtime-fips, milvus, nats-top, prometheus-nats-exporter, rke2-runtime...
GO-2026-4827 vulnerabilities
Vulnerabilities for packages: nats-top-fips, k3s, telegraf, nats, kine, nats-fips, prometheus-nats-exporter-fips, rke2-runtime-fips, milvus, nats-top, prometheus-nats-exporter, rke2-runtime...
GO-2026-4826 vulnerabilities
Vulnerabilities for packages: nats-top-fips, k3s, telegraf, nats, kine, nats-fips, prometheus-nats-exporter-fips, rke2-runtime-fips, milvus, nats-top, prometheus-nats-exporter, rke2-runtime...
GO-2026-4831 vulnerabilities
Vulnerabilities for packages: nats-top-fips, k3s, telegraf, nats, kine, nats-fips, prometheus-nats-exporter-fips, rke2-runtime-fips, milvus, nats-top, prometheus-nats-exporter, rke2-runtime...