Lucene search
K

16 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/27 12:0 a.m.6 views

FreeBSD : Grafana -- Grafana Testdata datasource can issue unbounded memory allocations (62717c0f-5901-11f1-b525-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 62717c0f-5901-11f1-b525-3c7c3fba4204 advisory. https://grafana.com/security/security-advisories/cve-2026-28375 reports: A testdata data-source can be...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/02 12:0 a.m.4 views

Grafana 8.1.0 < 11.6.14 / 12.0.0 < 12.1.10 / 12.2.0 < 12.2.8 / 12.3.0 < 12.3.6 / 12.4.0 < 12.4.2 DoS (CVE-2026-28375)

The version of Grafana installed on the remote host is 8.1.x through 11.6.x prior to 11.6.14, 12.0.x through 12.1.x prior to 12.1.10, 12.2.x prior to 12.2.8, 12.3.x prior to 12.3.6, or 12.4.x prior to 12.4.2. It is, therefore, affected by a denial of service vulnerability: - A testdata data-sourc...

6.5CVSS5.9AI score0.00029EPSS
Exploits0References2
OSV
OSV
added 2026/04/01 8:41 a.m.2 views

BIT-GRAFANA-2026-28375 Grafana Testdata datasource can issue unbounded memory allocations

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/03/31 8:31 a.m.3 views

SUSE CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/03/27 8:52 p.m.4 views

CVE-2026-28375

A flaw was found in Grafana. A remote attacker with low privileges could exploit this vulnerability by using a specially crafted testdata data-source. This could trigger out-of-memory crashes, leading to a Denial of Service DoS. Mitigation Mitigation for this issue is either not available or the...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References4
EUVD
EUVD
added 2026/03/27 3:30 p.m.1 views

EUVD-2026-16638

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References2
OSV
OSV
added 2026/03/27 3:16 p.m.1 views

UBUNTU-CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/03/27 3:16 p.m.2 views

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/27 2:26 p.m.3 views

CVE-2026-28375 Grafana Testdata datasource can issue unbounded memory allocations

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2026/03/27 2:26 p.m.3 views

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS5.2AI score0.00029EPSS
Exploits0
CVE
CVE
added 2026/03/27 2:26 p.m.10 views

CVE-2026-28375

CVE-2026-28375 affects Grafana via the testdata data-source, where a flaw permits unbounded memory allocations, leading to out-of-memory crashes. The connected CVE entry confirms the root cause as unbounded allocations by the testdata data-source, resulting in availability impact (OOM) . The prov...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/27 2:26 p.m.2 views

CVE-2026-28375

A testdata data-source can be used to trigger out-of-memory crashes in Grafana...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References2Affected Software1
Snyk
Snyk
added 2026/03/27 2:26 p.m.2 views

Allocation of Resources Without Limits or Throttling

Overview github.com/grafana/grafana/pkg/tsdb is a developer testing tool for Grafana. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the testdata data-source. An attacker can cause the application to crash and become unavailable by...

7.1CVSS5.9AI score0.00029EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/27 12:0 a.m.4 views

Grafana 安全漏洞

Grafana is a set of open-source monitoring tools developed by Grafana Open Source, which provide a visual monitoring interface. This tool is primarily used for monitoring and analyzing Graphite, InfluxDB, and Prometheus. Grafana has a security vulnerability that can lead to a memory insufficiency...

6.5CVSS5.8AI score0.00029EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/27 12:0 a.m.2 views

PT-2026-28379

This update fixes the following issues: golang-github-lusitaniae-apache exporter: - Internal changes to fix build issues with no impact for customers golang-github-prometheus-prometheus: - Security issues fixed: CVE-2026-27606: Fixed arbitrary file write via path traversal in rollup bsc1258893 +...

6.5CVSS7.6AI score0.00438EPSS
Exploits4References57
CNNVD
CNNVD
added 2021/12/10 12:0 a.m.2 views

Grafana 路径遍历漏洞

Grafana is an open source monitoring tool from Grafana Labs that provides a visual monitoring interface. The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus, etc. A path traversal vulnerability exists in Grafana, which stems from the product's failure to effectively...

4.3CVSS7.4AI score0.01202EPSS
Exploits0References12
Rows per page
Query Builder