523 matches found
CVE-2020-35187
The official telegraf docker images before 1.9.4-alpine Alpine specific contain a blank password for a root user. System using the telegraf docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...
CBL Mariner 2.0 Security Update: telegraf (CVE-2025-30215)
The version of telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30215 advisory. - NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system. In...
Azure Linux 3.0 Security Update: telegraf (CVE-2025-30215)
The version of telegraf installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30215 advisory. - NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system. In...
CVE-2025-30215 affecting package telegraf for versions less than 1.29.4-15
CVE-2025-30215 affecting package telegraf for versions less than 1.29.4-15. A patched version of the package is available...
CVE-2025-30215 affecting package telegraf for versions less than 1.31.0-9
CVE-2025-30215 affecting package telegraf for versions less than 1.31.0-9. A patched version of the package is available...
CVE-2025-27144 affecting package telegraf for versions less than 1.31.0-8
CVE-2025-27144 affecting package telegraf for versions less than 1.31.0-8. A patched version of the package is available...
AZL-60485 CVE-2025-22872 affecting package telegraf for versions less than 1.31.0-10
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
AZL-60588 CVE-2025-22872 affecting package telegraf for versions less than 1.29.4-16
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
CVE-2024-35255 affecting package telegraf for versions less than 1.31.0-1
CVE-2024-35255 affecting package telegraf for versions less than 1.31.0-1. A patched version of the package is available...
GHSA-FHG8-QXH5-7Q3W vulnerabilities
Vulnerabilities for packages: nats-top, nats-server...
CVE-2025-30215 vulnerabilities
Vulnerabilities for packages: nats-top, nats-server...
GHSA-FHG8-QXH5-7Q3W vulnerabilities
Vulnerabilities for packages: nats-server-fips, nats-top, nats-top-fips, prometheus-nats-exporter, nats-server...
CVE-2025-30215 vulnerabilities
Vulnerabilities for packages: nats-server-fips, nats-top, nats-top-fips, prometheus-nats-exporter, nats-server...
AZL-60406 CVE-2025-30215 affecting package telegraf for versions less than 1.31.0-9
NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system. In versions starting from 2.2.0 but prior to 2.10.27 and 2.11.1, the management of JetStream assets happens with messages in the $JS. subject namespace in the system account; this is partially expose...
AZL-60399 CVE-2025-30215 affecting package telegraf for versions less than 1.29.4-15
NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system. In versions starting from 2.2.0 but prior to 2.10.27 and 2.11.1, the management of JetStream assets happens with messages in the $JS. subject namespace in the system account; this is partially expose...
CVE-2025-1386 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-M454-3XV7-QJ85 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2025-1386 vulnerabilities
Vulnerabilities for packages: telegraf...