Filter
-Infinity
0
Trending
Red Hat OpenShift TempoRed Hat OpenShift distributed tracing platform (Tempo) 3.5.1 release
First published (updated )
Tempo OperatorTempo-operator: tempo operator token exposition lead to read sensitive data
4.3
First published (updated )
go/github.com/grafana/grafanaOrganization admins can delete pending invites created in an organization they are not part of.
2.7
First published (updated )
go/github.com/grafana/grafanaGrafana SQL Expressions allow for remote code execution
10
EPSS
18.48%
First published (updated )
go/github.com/grafana/agentGrafana Agent Flow on Windows Unquoted service path
7.8
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GrafanaGrafana Alloy on Windows Unquoted service path
7.8
EPSS
0.04%
First published (updated )
redhat/grafanaUser with permissions to create a data source can CRUD all data sources
8.8
First published (updated )
go/github.com/grafana/grafanaA user changing their email after signing up and verifying it can change it without verification in …
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Grafana Labs Grafana OSS and EnterpriseGrafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Reques…
7.2
First published (updated )
go/github.com/grafana/google-sheets-datasourceGrafana is an open-source platform for monitoring and observability. The Google Sheets data source …
7.5
First published (updated )
Grafana Labs Grafana OSS and EnterpriseGrafana is an open-source platform for monitoring and observability. The vulnerability impacts insta…
7.2
First published (updated )
Grafana Labs Grafana OSS and EnterpriseGrafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email f…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/grafanaGrafana is an open-source platform for monitoring and observability. The option to send a test ale…
6.4
First published (updated )
CortexAn issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to c…
First published (updated )
redhat/GrafanaStored XSS in Graphite FunctionDescription tooltip
6.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Grafana Labs Grafana OSS and EnterpriseWhen query caching is enabled in Grafana users can query another users session
8.8
First published (updated )
go/github.com/grafana/grafanaStored XSS in Grafana Text plugin
6.4
First published (updated )
redhat/GrafanaGrafana stored XSS in FileUploader component
7.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Grafana Enterprise MetricsAccess policy with access to all tenants and using label selectors has more access
8.8
First published (updated )
Grafana Synthetic Monitoring AgentGrafana's default installation of `synthetic-monitoring-agent` exposes sensitive information
7.2
First published (updated )
redhat/grafanaGrafana vulnerable to spoofing originalUrl of snapshots
6.7
First published (updated )
go/github.com/grafana/grafanaGrafana vulnerable to race condition allowing privilege escalation
9.8
First published (updated )
go/github.com/grafana/grafanaGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password
6.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.