Lucene search
+L

6405 matches found

NVD
NVD
added 2025/10/09 8:15 a.m.14 views

CVE-2025-11539

Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...

9.9CVSS0.00594EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/09 7:18 a.m.58 views

CVE-2025-11539

Grafana Image Renderer (grafana-image-renderer) is affected by an ARBITRARY FILE WRITE leading to remote code execution via /render/csv, where a lack of validation of filePath allows saving a shared object to an arbitrary location loaded by Chromium. Affected versions are 1.0.0 through 4.0.16. Ex...

9.9CVSS8AI score0.00594EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/09 7:18 a.m.36 views

CVE-2025-11539 Arbitrary Code Execution in Grafana Image Renderer Plugin

Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...

9.9CVSS0.00594EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/09 7:18 a.m.5 views

CVE-2025-11539 Arbitrary Code Execution in Grafana Image Renderer Plugin

Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...

9.9CVSS8AI score0.00594EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/09 7:18 a.m.11 views

CVE-2025-11539 Arbitrary Code Execution in Grafana Image Renderer Plugin

Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...

9.9CVSS7.9AI score
SaveExploits0References4
EUVD
EUVD
added 2025/10/09 7:18 a.m.7 views

EUVD-2025-33321

Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...

9.9CVSS7.8AI score0.00594EPSS
SaveExploits0References2
Grafana
Grafana
added 2025/10/09 12:00 a.m.22 views

Arbitrary Code Execution in Grafana Image Renderer Plugin

Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...

9.9CVSS6.5AI score0.00594EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/10/09 12:00 a.m.15 views

PT-2025-41359

Name of the Vulnerable Software and Affected Versions Grafana Image Renderer versions 1.0.0 through 4.0.16 Description Grafana Image Renderer is susceptible to remote code execution due to an arbitrary file write issue. The /render/csv API endpoint lacks proper validation of the filePath paramete...

9.9CVSS7.8AI score0.00594EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2025/10/09 12:00 a.m.11 views

grafana-image-renderer 安全漏洞

grafana-image-renderer is a Grafana open source backend plugin for Grafana. A security vulnerability exists in grafana-image-renderer versions 1.0.0 through 4.0.16, which stems from the /render/csv endpoint that does not validate the filePath parameter, which could lead to remote code execution...

9.9CVSS7.5AI score0.00594EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2013-6604

Malware in sbrugna...

5.8CVSS6.1AI score0.01425EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-6588

Malware in sbrugna...

7.5CVSS7.5AI score0.01114EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-7967

Malware in sbrugna...

8.8CVSS8.6AI score0.00844EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-17486

Malware in sbrugna...

8.8CVSS9.1AI score0.01737EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2011-1444

Malware in sbrugna...

6.8CVSS6.1AI score0.00848EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-27697

Malware in sbrugna...

9.3CVSS9.1AI score0.02606EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-17437

Malware in sbrugna...

8.8CVSS9.2AI score0.01343EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-17916

Malware in sbrugna...

8.8CVSS9.1AI score0.01951EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-5183

Malware in sbrugna...

8.8CVSS8.5AI score0.15537EPSS
SaveExploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-15381

Malware in sbrugna...

8.8CVSS9.1AI score0.0153EPSS
SaveExploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-7982

Malware in sbrugna...

9.6CVSS9.2AI score0.0099EPSS
SaveExploits0References6
Rows per page
Query Builder