24 matches found
Grafana Monitoring Resource Consumption DoS
The vulnerability of the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Grafana Resample Heap Buffer Overflow DoS
The vulnerability of the mathexp.Resample function on the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Grafana OpenFeature DoS
The vulnerability of the OpenFeature function on the Grafana monitoring and observation platform relates to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Grafana Authentication Bypass
The vulnerability of the Grafana monitoring and observation platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Grafana Auth Proxy Bypass
The vulnerability of the Auth Proxy function of the Grafana monitoring and logging platform relates to the default use of addresses with a mask of /32 when using a list of allowed IP addresses. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...
GHSA-FW8G-CG8F-9J28 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, trillian, datadog-agent, splunk-otel-collector, loki, mcp-grafana, prometheus-pushgateway, tempo, minio, cloud-sql-proxy, opentelemetry-operator, certificate-transparency, amazon-cloudwatch-agent-operator, node-problem-detector, metrics-serve...
Grafana Monitoring Unauthorized Access
The vulnerability of the monitoring and surveillance platform for Grafana relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260311-73-0010
A vulnerability in the application programming interface of the Grafana monitoring and surveillance platform involves insecure privilege management. Exploitation of the vulnerability could allow a remote attacker to escalate privileges and gain unauthorized access to protected information...
Grafana Correlation Function Unauthorized Access
The vulnerability of the correlation function of the Grafana monitoring and observation platform is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Grafana Information Disclosure
The vulnerability of the Grafana monitoring and observation platform is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Cross-dashboard privilege escalation via permission management
Grafana is an open-source platform for monitoring and observability. The platform supports creating dashboards, which collate various visualisation panels onto one plane. These can have per-user permissions. If a user has permission management rights on one dashboard, they could edit the...
Grafana SCIM Unauthorized Access
The vulnerability of the SCIM implementation in the Grafana monitoring and observation platform is related to deficiencies in the privilege assignment mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the platform...
Grafana Image Processing Plugin Code Execution
The vulnerability of the image processing plugin for the Grafana monitoring and observation platform is related to incorrect code generation during the processing of the filePath parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by loading a specially...
EUVD-2023-57460
Malicious code in bioql PyPI...
EUVD-2022-29612
Malicious code in bioql PyPI...
EUVD-2023-1909
Malicious code in bioql PyPI...
EUVD-2023-54262
Malicious code in bioql PyPI...
EUVD-2024-1372
Malicious code in bioql PyPI...