TencentOS Server 4: grafana-pcp (TSSA-2025:0439)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0439 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2024-8986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved ...

govulncheck-vulndb-0.0.20241120T172248-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241120T172248-1.1 on GA media Announcement ID: openSUSE-SU-2024:14515-1 Rating: moderate Cross-References: CVE-2024-52009 CVE-2024-8986 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security...

CVE-2024-8986

creationtimestamp| type| source ---|---|--- 2024-09-19 13:39:00+00:00| seen| https://t.me/cvedetector/6050 2024-09-23 10:55:29+00:00| published-proof-of-concept| https://t.me/HackingInsights/14083...

CVE-2024-8986

The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running git remote get-url origin. If credentials are included in the repository URI for instance, to allow for fetching of private...

CVE-2024-8986 Information Leakage in grafana-plugin-sdk-go

The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running git remote get-url origin. If credentials are included in the repository URI for instance, to allow for fetching of private...

CVE-2024-8986

CVE-2024-8986 is tied to Grafana’s grafana-plugin-sdk-go which embeds build metadata in binaries, including the repository URL obtained via git remote get-url origin. If credentials are present in that URL, the final binary may contain the full URI with credentials, creating a risk of credential ...