328 matches found
AZL-75479 CVE-2025-11065 affecting package influxdb for versions less than 2.6.1-30
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
Azure Linux 3.0 Security Update: influxdb (CVE-2019-0205)
The version of influxdb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-0205 advisory. - In Apache Thrift all versions up to and including 0.12.0, a server or client May run into an endless loop...
CVE-2025-10543 affecting package influxdb for versions less than 2.7.5-10
CVE-2025-10543 affecting package influxdb for versions less than 2.7.5-10. A patched version of the package is available...
CVE-2025-65637 affecting package influxdb for versions less than 2.6.1-25
CVE-2025-65637 affecting package influxdb for versions less than 2.6.1-25. A patched version of the package is available...
CVE-2025-10543 affecting package influxdb for versions less than 2.6.1-27
CVE-2025-10543 affecting package influxdb for versions less than 2.6.1-27. A patched version of the package is available...
CVE-2025-65637 affecting package influxdb for versions less than 2.7.5-9
CVE-2025-65637 affecting package influxdb for versions less than 2.7.5-9. A patched version of the package is available...
AZL-71602 CVE-2025-65637 affecting package influxdb for versions less than 2.6.1-28
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...
AZL-71311 CVE-2025-10543 affecting package influxdb for versions less than 2.7.5-10
In Eclipse Paho Go MQTT v3.1 library paho.mqtt.golang versions =1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to the server for example, part of an MQTT topic may leak into...
AZL-71299 CVE-2025-10543 affecting package influxdb for versions less than 2.6.1-27
In Eclipse Paho Go MQTT v3.1 library paho.mqtt.golang versions =1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to the server for example, part of an MQTT topic may leak into...
EUVD-2022-5716
Malicious code in bioql PyPI...
EUVD-2022-5501
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-1000816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running...
Linux Distros Unpatched Vulnerability : CVE-2022-36640
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the...
Linux Distros Unpatched Vulnerability : CVE-2024-30896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the...
CVE-2025-22872 affecting package influxdb for versions less than 2.7.5-5
CVE-2025-22872 affecting package influxdb for versions less than 2.7.5-5. A patched version of the package is available...
CVE-2022-36640
influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deployed on a publicly accessible endpoint...
CVE-2019-10329
Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
Security Bulletin: IBM Security Verify Information Queue does not hide the InfluxDB credentials when setting up the logs stack (CVE-2021-20410)
Summary IBM Security Verify Information Queue ISIQ offers an optional logs stack to demonstrate logging and monitoring. The logs stack YAML file has parameters for defining an InfluxDB instance. The parameters include the InfluxDB user and password credentials. As of ISIQ v10.0.0, these credentia...