1664 matches found
CVE-2023-1733
A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to 15.10.1...
CVE-2022-4289
An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users...
CVE-2020-16248
Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability...
golang-github-prometheus-node_exporter-1.9.1-3.1 on GA media (moderate)
golang-github-prometheus-nodeexporter-1.9.1-3.1 on GA media Announcement ID: openSUSE-SU-2025:15075-1 Rating: moderate Cross-References: CVE-2023-45288 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUSE : 6.9...
OPENSUSE-SU-2025:15075-1 golang-github-prometheus-node_exporter-1.9.1-3.1 on GA media
These are all security issues fixed in the golang-github-prometheus-nodeexporter-1.9.1-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-22872 affecting package prometheus-adapter for versions less than 0.12.0-3
CVE-2025-22872 affecting package prometheus-adapter for versions less than 0.12.0-3. A patched version of the package is available...
CVE-2025-22870 affecting package prometheus for versions less than 2.45.4-12
CVE-2025-22870 affecting package prometheus for versions less than 2.45.4-12. A patched version of the package is available...
CVE-2024-51744 affecting package prometheus for versions less than 2.45.4-12
CVE-2024-51744 affecting package prometheus for versions less than 2.45.4-12. A patched version of the package is available...
SUSE CVE-2025-3454
This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources. The issue primarily...
CVE-2025-3454
This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources. The issue primarily...
CVE-2024-35255 affecting package prometheus for versions less than 2.45.4-11
CVE-2024-35255 affecting package prometheus for versions less than 2.45.4-11. A patched version of the package is available...
[SECURITY] Fedora 41 Update: prometheus-podman-exporter-1.16.0-1.fc41
Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...
[SECURITY] Fedora 42 Update: prometheus-podman-exporter-1.16.0-1.fc42
Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...
Fedora 41 : prometheus-podman-exporter (2025-b0915f0a19)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b0915f0a19 advisory. release v1.16.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
AZL-60550 CVE-2025-22872 affecting package prometheus-adapter for versions less than 0.12.0-3
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2
CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2. A patched version of the package is available...
GHSA-FHG8-QXH5-7Q3W vulnerabilities
Vulnerabilities for packages: telegraf, nats-server, nats-server-fips, prometheus-nats-exporter, nats-top-fips, nats-top...
CVE-2025-30215 vulnerabilities
Vulnerabilities for packages: telegraf, nats-server, nats-server-fips, prometheus-nats-exporter, nats-top-fips, nats-top...
CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3
CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3. A patched version of the package is available...