41 matches found
Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)
Prometheus Blackbox Exporter through 0.17.0 contains a server-side request forgery caused by unsanitized target parameter in /probe, letting attackers perform SSRF attacks, exploit requires sending crafted target parameter. id: CVE-2020-16248 info: name: Prometheus Blackbox Exporter - Server-Side...
PT-2026-105634
These are all security issues fixed in the prometheus-blackbox exporter-0.26.0-9.1 package on the GA media of openSUSE Tumbleweed...
CLEANSTART-2026-QQ16629 Security fix for CVE-2020-16248 applied in: prometheus-blackbox-exporter 0.18.0-r0
Security vulnerability affects the prometheus-blackbox-exporter package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-OT08451 Security fix for CVE-2026-40898 applied in: kube-metrics-adapter 0.2.9-r0, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, prometheus-blackbox-exporter 0.28.0-r2
CVE-2026-40898 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101494
Security vulnerability affects the prometheus-blackbox-exporter package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-UQ52900 Security fixes in prometheus-blackbox-exporter 0.28.0-r1
Package prometheus-blackbox-exporter version 0.28.0-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
OPENSUSE-SU-2026:10971-1 prometheus-blackbox_exporter-0.26.0-6.1 on GA media
These are all security issues fixed in the prometheus-blackboxexporter-0.26.0-6.1 package on the GA media of openSUSE Tumbleweed...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: kubescape, dbmate, vault-benchmark, kubernetes-dashboard-auth, knative-serving, mockery, local-path-provisioner, flux, neuvector-dbgen, wuzz, knative-eventing, ingress-nginx-controller, php-fpmexporter, cilium, helm-push, q, supercronic,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: kubescape, dbmate, vault-benchmark, kubernetes-dashboard-auth, knative-serving, mockery, local-path-provisioner, flux, neuvector-dbgen, wuzz, knative-eventing, ingress-nginx-controller, php-fpmexporter, cilium, helm-push, q, supercronic,...
CLEANSTART-2026-YM28538 Prometheus Blackbox Exporter through 0
Multiple security vulnerabilities affect the prometheus-blackbox-exporter package. Prometheus Blackbox Exporter through 0. See references for individual vulnerability details...
CLEANSTART-2026-ZL24388 Prometheus Blackbox Exporter through 0
Multiple security vulnerabilities affect the prometheus-blackbox-exporter package. Prometheus Blackbox Exporter through 0. See references for individual vulnerability details...
Linux Distros Unpatched Vulnerability : CVE-2023-26735
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports...
Linux Distros Unpatched Vulnerability : CVE-2020-16248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both...
SUSE SLES15 / openSUSE 15 Security Update : Multi-Linux Manager Client Tools (SUSE-SU-2025:01989-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01989-1 advisory. golang-github-prometheus-prometheus was updated to version 2.53.4: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 fo...
prometheus-blackbox_exporter-0.24.0-3.1 on GA media (moderate)
prometheus-blackboxexporter-0.24.0-3.1 on GA media Announcement ID: openSUSE-SU-2025:15162-1 Rating: moderate Cross-References: CVE-2023-45288 CVE-2025-22870 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUSE : 6.9...
OPENSUSE-SU-2025:15162-1 prometheus-blackbox_exporter-0.24.0-3.1 on GA media
These are all security issues fixed in the prometheus-blackboxexporter-0.24.0-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2020-16248
Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability...
OPENSUSE-SU-2024:12904-1 prometheus-blackbox_exporter-0.19.0-13.1 on GA media
These are all security issues fixed in the prometheus-blackboxexporter-0.19.0-13.1 package on the GA media of openSUSE Tumbleweed...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kiam, kubernetes-csi-livenessprobe-fips, terraform-provider-sendgrid, volume-modifier-for-k8s-fips, spark-operator, slsa-verifier, terraform-provider-sendgrid-fips, scorecard, up, metrics-server-fips, prometheus-stackdriver-exporter, k3d, smarter-device-manager-fips,...