Lucene search
+L

1648 matches found

RedHat Linux
RedHat Linux
added 2022/11/08 9:43 a.m.8 views

prometheus/client_golang: Denial of service using InstrumentHandlerCounter

A denial of service attack was found in prometheus/clientgolang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability...

7.5CVSS6.8AI score0.05994EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/11/08 9:34 a.m.9 views

prometheus/client_golang: Denial of service using InstrumentHandlerCounter

A denial of service attack was found in prometheus/clientgolang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability...

7.5CVSS6.8AI score0.05994EPSS
SaveExploits0References5
Rockylinux
Rockylinux
added 2022/11/08 6:26 a.m.16 views

prometheus-jmx-exporter bug fix and enhancement update

An update is available for prometheus-jmx-exporter. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

2AI score
SaveExploits0
Rockylinux
Rockylinux
added 2022/11/08 6:22 a.m.90 views

container-tools:3.0 security update

An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

7.8CVSS8.2AI score0.05994EPSS
SaveExploits4
OpenVAS
OpenVAS
added 2022/10/27 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2022:3747-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS8.9AI score0.68603EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2022/10/27 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2022:3745-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.9AI score0.05994EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/10/27 12:0 a.m.45 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : golang-github-prometheus-node_exporter (SUSE-SU-2022:3745-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3745-1 advisory. bsc1196338, jscSLE-24238, jscSLE-24239, jscSUMA-114, CVE-2022-21698 Tenable has extracted the preceding...

7.5CVSS6.8AI score0.05994EPSS
SaveExploits0References4
OSV
OSV
added 2022/10/14 3:15 p.m.6 views

AZL-33632 CVE-2022-32149 affecting package prometheus-adapter for versions less than 0.10.0-14

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

7.5CVSS6.7AI score0.01494EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/10/08 12:0 a.m.41 views

AlmaLinux 8 : prometheus-jmx-exporter (ALSA-2022:6820)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6820 advisory. - The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service DoS due missing to nested depth limitation for collections...

7.5CVSS6.7AI score0.02191EPSS
SaveExploits2References2
RedHat Linux
RedHat Linux
added 2022/10/06 7:40 a.m.46 views

Moderate: Red Hat Security Advisory: prometheus-jmx-exporter security update

An update for prometheus-jmx-exporter is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.6AI score0.02191EPSS
SaveExploits2References2
OSV
OSV
added 2022/10/06 7:13 a.m.32 views

RLSA-2022:6820 Moderate: prometheus-jmx-exporter security update

Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target. Security Fixes: snakeyaml: Denial of Service due to missing nested depth limitation for collections CVE-2022-25857 For more details about the security issues,...

7.5CVSS8.7AI score0.02191EPSS
SaveExploits2References2
Rockylinux
Rockylinux
added 2022/10/06 7:13 a.m.171 views

prometheus-jmx-exporter security update

An update is available for prometheus-jmx-exporter. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Prometheus JMX Exporter is a JMX to Prometheus exporter: a...

7.5CVSS7.7AI score0.02191EPSS
SaveExploits2
AlmaLinux
AlmaLinux
added 2022/10/06 12:0 a.m.40 views

Moderate: prometheus-jmx-exporter security update

Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target. Security Fixes: snakeyaml: Denial of Service due to missing nested depth limitation for collections CVE-2022-25857 For more details about the security issues,...

7.5CVSS7.8AI score0.02191EPSS
SaveExploits2References4
Oracle linux
Oracle linux
added 2022/10/06 12:0 a.m.90 views

prometheus-jmx-exporter security update

0.12.0-8 - Bump snakeyaml version to 1.32 to collect fix for CVE-2022-25857 BZ 2128477...

7.5CVSS2.8AI score0.02191EPSS
SaveExploits2
OSV
OSV
added 2022/10/06 12:0 a.m.26 views

ALSA-2022:6820 Moderate: prometheus-jmx-exporter security update

Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target. Security Fixes: snakeyaml: Denial of Service due to missing nested depth limitation for collections CVE-2022-25857 For more details about the security issues,...

7.5CVSS8.7AI score0.02191EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2022/10/06 12:0 a.m.35 views

RHEL 8 : prometheus-jmx-exporter (RHSA-2022:6820)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6820 advisory. Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target. Security...

7.5CVSS6.8AI score0.02191EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
added 2022/10/06 12:0 a.m.36 views

Oracle Linux 8 : prometheus-jmx-exporter (ELSA-2022-6820)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6820 advisory. 0.12.0-8 - Bump snakeyaml version to 1.32 to collect fix for CVE-2022-25857 BZ 2128477 Tenable has extracted the preceding description block directly from the...

7.5CVSS6.7AI score0.02191EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2022/10/03 12:0 a.m.43 views

Oracle Linux 7 : kubernetes (ELSA-2022-9855)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9855 advisory. - Resolve Kubernetes CVE-2022-3172 for version 1.21 - Resolve Kubernetes CVE-2022-3172 for version 1.22 - Resolve Kubernetes CVE-2022-3172 for version 1.23 -...

10CVSS6.8AI score0.02701EPSS
SaveExploits2References2
OSV
OSV
added 2022/09/26 10:34 a.m.7 views

SUSE-SU-2022:3382-1 Security update for permissions

This update for permissions fixes the following issues: - CVE-2022-31252: Fixed chkstat group controlled paths bsc1203018. - Add capability for prometheus-blackboxexporter bsc1191194. - Make btmp root:utmp bsc1050467...

4.4CVSS4.7AI score0.00143EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/09/20 12:0 a.m.8 views

Grafana 安全漏洞

Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. Grafana has a security vulnerability. No information about this vulnerability is...

7.6CVSS7AI score0.00635EPSS
SaveExploits0References6
Rows per page
Query Builder