62 matches found
CVE-2023-38502 TDengine Database Denial-of-Service
TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query. This issue affects TDengine Databases which let users connect and run arbitrary queries. Version 3.0.7.1 has a patch for this issue...
CVE-2023-36812 Remote Code Execution in OpenTSDB
OpenTSDB is a open source, distributed, scalable Time Series Database TSDB. OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. This issue has been patched in commit...
Apache IoTDB 安全漏洞
Apache IoTDB is an integrated data management engine designed for time series data from the Apache Foundation USA, which provides data collection, storage and analysis services, among other things. A security vulnerability exists in Apache IoTDB versions prior to 0.13.4 that stems from the presen...
Apache IoTDB 授权问题漏洞
Apache IoTDB is an integrated data management engine designed for time series data from the Apache Foundation USA that provides data collection, storage and analysis services, among other things. An authorization issue vulnerability exists in Apache IoTDB Grafana Connector versions 0.13.0 through...
Apache IoTDB 安全漏洞
Apache IoTDB is an integrated data management engine designed for time series data from the Apache USA Foundation that provides data collection, storage, and analysis services, among other things. A security vulnerability exists in Apache IoTDB version 0.13.0 through versions prior to 0.13.3, whi...
Apache IoTDB 安全漏洞
Apache IoTDB is an integrated data management engine designed for time series data from the Apache Foundation that provides data collection, storage, and analysis services, among other things.Apache IoTDB version 0.13.0 contains an access control error vulnerability that stems from the inclusion ...
[SECURITY] Fedora 36 Update: golang-github-prometheus-2.32.1-7.fc36
The Prometheus monitoring system and time series database...
[SECURITY] Fedora 35 Update: golang-github-prometheus-2.32.1-6.fc35
The Prometheus monitoring system and time series database...
Fedora: Security Advisory for golang-github-prometheus (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: golang-github-prometheus-2.32.1-6.fc36
The Prometheus monitoring system and time series database...
Fedora: Security Advisory for golang-github-prometheus (FEDORA-2022-08ae2dd481)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: golang-github-prometheus-2.32.1-4.fc36
The Prometheus monitoring system and time series database...
Fedora: Security Advisory for golang-github-prometheus (FEDORA-2022-3a63897745)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: golang-github-prometheus-2.32.1-4.fc34
The Prometheus monitoring system and time series database...
[SECURITY] Fedora 35 Update: golang-github-prometheus-2.32.1-4.fc35
The Prometheus monitoring system and time series database...
Icinga 信任管理问题漏洞
Icinga is a scalable server, network resource monitoring system from Icinga, Germany. Icinga suffers from a trust management issue vulnerability that stems from instances of the application connecting to any of the mentioned time-series databases via spoofable infrastructure using TLS...
PT-2021-21818 · Icinga +1 · Icinga +1
Name of the Vulnerable Software and Affected Versions: Icinga versions 2.5.0 through 2.13.0 Description: Icinga is a monitoring system that checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The issue arises in the...
FreeBSD : Prometheus -- arbitrary redirects (59ab72fb-bccf-11eb-a38d-6805ca1caf5c)
Prometheus reports : Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL's prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an...
grafana: XSS via the OpenTSDB datasource
A flaw was found in grafana Tag value XSS via the OpenTSDB datasource are possible. The highest threat from this vulnerability is to data confidentiality and integrity...
OpenTSDB cross-site scripting vulnerability (CNVD-2018-13554)
OpenTSDB is a set of open source, scalable distributed time series database. A cross-site scripting vulnerability exists in OpenTSDB version 2.3.0. A remote attacker can exploit this vulnerability by sending the 'type' parameter to the /suggest URI to inject arbitrary Web script or HTML...