FreeBSD : Grafana -- Grafana DS proxy race condition (652064ef-056f-11ee-8e16-6c3be5272acd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 652064ef-056f-11ee-8e16-6c3be5272acd advisory. - Grafana is an open-source platform for monitoring and observability. Using public dashboards users ca...

Grafana Missing Synchronization vulnerability

Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance. The only feature that uses mixed queries at the moment is public...

CVE-2023-2801

Grafana (CVE-2023-2801) is affected by a vulnerability allowing a crash via mixed data-source queries in public dashboards or when calling the query API directly. The issue is tied to Grafana’s handling of mixed queries and could impact availability of the Grafana instance. Fixed versions per the...

Grafana ds proxy race condition

Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance. The only feature that uses mixed queries at the moment is public...

CVE-2015-3035

creationtimestamp| type| source ---|---|--- 2023-06-05 16:20:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/tplinkarcherc7traversal.rb 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 13:14:49+00:00| seen|...

PT-2023-4182 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to insufficient data validation in the Extensions component of Google Chrome, allowing an attacker to inject scripts or HTML into a privileged page via a crafted...

CVE-2023-34362

creationtimestamp| type| source ---|---|--- 2023-06-02 18:37:26+00:00| exploited| https://t.me/cibsecurity/64889 2023-06-03 20:36:45+00:00| seen| MISP/4a0ea337-6c2a-4806-ba26-4521609b1d06 2023-06-04 09:13:30+00:00| seen| Telegram/RSCktmF4Nxh0hg6x76OzqUoGI-OFLYF1t3wy8YJnDHLKc 2023-06-04...

CVE-2023-28161

If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that tab for all other documents loaded from a file: URL. This is potentially dangerous if the local files came from different sources, suc...

CVE-2023-28161

If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that tab for all other documents loaded from a file: URL. This is potentially dangerous if the local files came from different sources, suc...

CVE-2023-33246

creationtimestamp| type| source ---|---|--- 2023-05-30 15:17:54+00:00| published-proof-of-concept| https://t.me/dilagrafie/3071 2023-05-30 15:54:33+00:00| published-proof-of-concept| https://t.me/proxybar/1551 2023-06-01 02:21:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4466...

CVE-2023-27988

creationtimestamp| type| source ---|---|--- 2023-05-30 08:34:06+00:00| seen| https://t.me/cibsecurity/64776 2023-05-31 14:46:54+00:00| seen| https://t.me/ctinow/115125...

PT-2023-24203 · Unknown · Zulip Server

Name of the Vulnerable Software and Affected Versions: Zulip Server versions 7.0-beta1 through 7.0-beta2 and the main development branch from May 2, 2023 and later Description: The issue is related to a cross-site scripting vulnerability in tooltips on the message feed. An attacker who can send...

GHSA-GW42-F939-FHVM

creationtimestamp| type| source ---|---|--- 2023-05-29 11:08:45+00:00| published-proof-of-concept| https://t.me/arvinclub1/271 2023-05-30 15:18:17+00:00| published-proof-of-concept| https://t.me/dilagrafie/3072 2023-07-24 16:23:05+00:00| published-proof-of-concept|...

PT-2023-24330 · Skycaiji · Skycaiji

Name of the Vulnerable Software and Affected Versions: skycaiji version 2.5.4 Description: The issue allows attackers to achieve backend Cross Site Scripting XSS by deploying malicious JSON data. This enables potential exploitation of the system. Recommendations: For skycaiji version 2.5.4,...

PT-2023-4776 · Spring · Spring For Apache Kafka

Name of the Vulnerable Software and Affected Versions: Spring for Apache Kafka versions 3.0.9 and earlier Spring for Apache Kafka versions 2.9.10 and earlier Description: The issue is related to a deserialization attack vector in Spring for Apache Kafka. An attacker would have to construct a...

CVE-2023-2868

creationtimestamp| type| source ---|---|--- 2023-05-24 22:27:13+00:00| seen| https://t.me/cibsecurity/64708 2023-05-25 09:47:41+00:00| exploited| https://t.me/CyberSecurityIL/23670 2023-05-25 12:46:11+00:00| exploited| https://t.me/ctinow/114122 2023-05-25 14:40:48+00:00| exploited|...

SAP BusinessObjects Business Intelligence Platform Information Disclosure (3038911)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a information disclosure vulnerability. Under certain conditions, SAP BusinessObjects Business Intelligence Platform Central Management Service - versions 420, 430, allows an...

DEBIAN-CVE-2023-32700

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5...

LuaTeX 安全漏洞

LuaTeX is an extended version of pdfTeX from LuaTeX, using Lua as the embedded scripting language. A security vulnerability exists in LuaTeX versions prior to 1.17.0, which arises from a vulnerability that allows execution of arbitrary shell commands when compiling TeX files obtained from untrust...

CVE-2023-32700

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5...