Lucene search
+L

4963 matches found

Positive Technologies
Positive Technologies
•added 2023/03/07 12:00 a.m.•24 views

PT-2023-7551 · Unknown · Trace Mode

Name of the Vulnerable Software and Affected Versions: TRACE MODE affected versions not specified Description: The issue is related to the unencrypted storage of credentials in the SCADA system. Exploitation of this issue could allow an attacker to modify user privileges, potentially granting...

4.9CVSS6.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/07 12:00 a.m.•11 views

PT-2023-7550 · Unknown · Trace Mode

Name of the Vulnerable Software and Affected Versions: TRACE MODE affected versions not specified Description: The issue is related to the storage of unencrypted credentials in the SCADA system. Exploitation of this issue could allow an attacker to substitute a password hash from one user to...

4.9CVSS7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/07 12:00 a.m.•12 views

PT-2023-35393 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to the reception of corrupted snap trace, which may lead to a security vulnerability. The actual impact and attack plausibility have not yet been proven. Recommendations...

7.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/03/06 12:35 a.m.•11 views

Malicious code in owa-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2730f76c4a2f75133740b824ee87e42529cefc04f9dc35ec99403ffc56fde0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/03/06 12:35 a.m.•16 views

MAL-2023-664 Malicious code in owa-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2730f76c4a2f75133740b824ee87e42529cefc04f9dc35ec99403ffc56fde0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/03/03 3:53 a.m.•16 views

SUSE CVE-2023-0594

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

7.3CVSS7.1AI score0.09216EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2023/03/02 12:00 a.m.•16 views

PT-2025-18800

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which was causing a call trace warning and hang when removing an amdgpu device on GPUs with RAS enabled. The issue occurred during...

5.5CVSS6.3AI score0.00202EPSS
SaveExploits0References432
osv_ghsa
osv_ghsa
•added 2023/03/01 6:30 p.m.•67 views

GHSA-XW5P-HW8J-XG4Q Grafana vulnerable to Cross-site Scripting

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

5.4CVSS7.1AI score0.09216EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2023/03/01 6:30 p.m.•55 views

Grafana vulnerable to Cross-site Scripting

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

7.3CVSS7.1AI score0.09216EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2023/03/01 6:30 p.m.•88 views

CVE-2023-0594

A flaw was found in the grafana package. This flaw allows a malicious user with the ability to introduce trace data to provide a JavaScript that changes the password for the user viewing the trace view this could be an admin to a known password, thus gaining access to the admin account. Mitigatio...

7.3CVSS7AI score0.09216EPSS
SaveExploits0References4
NVD
NVD
•added 2023/03/01 4:15 p.m.•33 views

CVE-2023-0594

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

7.3CVSS7.1AI score0.09216EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2023/03/01 4:15 p.m.•18 views

UBUNTU-CVE-2023-0594

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

7.3CVSS7.1AI score0.09216EPSS
SaveExploits0References2
Prion
Prion
•added 2023/03/01 4:15 p.m.•32 views

Cross site scripting

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

4.9CVSS5.4AI score0.09216EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/01 3:36 p.m.•17 views

CVE-2023-0594

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

7.3CVSS7.1AI score0.09216EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/03/01 3:36 p.m.•254 views

CVE-2023-0594

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

7.3CVSS7.2AI score0.09216EPSS
SaveExploits0References1
CVE
CVE
•added 2023/03/01 3:36 p.m.•813 views

CVE-2023-0594

Grafana CVE-2023-0594 is a stored XSS in the trace view visualization introduced on the 7.x line. The vulnerability arises because span attribute/resource values were not properly sanitized and can be rendered when expanded, enabling an attacker with Editor role to inject JavaScript into a trace ...

7.3CVSS7.1AI score0.09216EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2023/03/01 3:36 p.m.•5 views

CVE-2023-0594

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

8.5CVSS0.09216EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/03/01 12:00 a.m.•27 views

PT-2025-18838

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the drm/amdgpu component. The issue occurs when the amdgpu is removed after a mode1 reset, causing a call trace warning ...

5.5CVSS6.5AI score0.00199EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/01 12:00 a.m.•4 views

CVE-2023-0594: Improper Neutralization of Input During Web Page Generation

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

7.3CVSS6.5AI score0.09216EPSS
SaveExploits0References3
Grafana
Grafana
•added 2023/02/28 12:00 a.m.•29 views

XSS in TraceView in Grafana

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this...

7.3CVSS7.1AI score0.09216EPSS
SaveExploits0
Rows per page
Query Builder