Поиск уязвимостей

БДУ ФСТЭК

Microsoft MSRC

NVD

Oracle ELSA

Red Hat CVE

РЕД ОС

Rocky RLSA

SUSE CVRF

Ubuntu

Debian

Github

ALT Linux

Количество 19

openSUSE-SU-2021:1603-1

почти 5 лет назад

Security update for netdata

EPSS: Низкий

openSUSE-SU-2021:0647-1

больше 5 лет назад

Security update for netdata

EPSS: Низкий

ALT-PU-2019-1379

больше 7 лет назад

ALT-PU-2019-1379: package `netdata` update to version 1.12.1-alt1

CVSS3: 7.5

EPSS: Низкий

CVE-2018-18836

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

CVSS3: 6.5

EPSS: Низкий

CVE-2018-18836

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

CVSS3: 6.5

EPSS: Низкий

CVE-2018-18836

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. JSON injection exists via t ...

CVSS3: 6.5

EPSS: Низкий

GHSA-h9cp-8fw3-4wc5

больше 4 лет назад

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

EPSS: Низкий

CVE-2018-18837

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

CVSS3: 6.1

EPSS: Низкий

CVE-2018-18837

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

CVSS3: 6.1

EPSS: Низкий

CVE-2018-18837

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exist ...

CVSS3: 6.1

EPSS: Низкий

GHSA-8mmg-j2hw-99h7

больше 4 лет назад

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

CVSS3: 6.1

EPSS: Низкий

CVE-2018-18839

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.

CVSS3: 5.3

EPSS: Низкий

CVE-2018-18839

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.

CVSS3: 5.3

EPSS: Низкий

CVE-2018-18839

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) ...

CVSS3: 5.3

EPSS: Низкий

CVE-2018-18838

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.

CVSS3: 7.5

EPSS: Низкий

CVE-2018-18838

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.

CVSS3: 7.5

EPSS: Низкий

CVE-2018-18838

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forge ...

CVSS3: 7.5

EPSS: Низкий

GHSA-m69f-fhj3-wf8q

больше 4 лет назад

** DISPUTED ** An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional."

CVSS3: 5.3

EPSS: Низкий

GHSA-hqrf-v6fm-gv6x

больше 4 лет назад

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано
openSUSE-SU-2021:1603-1 Security update for netdata			почти 5 лет назад
openSUSE-SU-2021:0647-1 Security update for netdata			больше 5 лет назад
ALT-PU-2019-1379 ALT-PU-2019-1379: package `netdata` update to version 1.12.1-alt1	CVSS3: 7.5		больше 7 лет назад
CVE-2018-18836 An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.	CVSS3: 6.5	2% Низкий	больше 7 лет назад
CVE-2018-18836 An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.	CVSS3: 6.5	2% Низкий	больше 7 лет назад
CVE-2018-18836 An issue was discovered in Netdata 1.10.0. JSON injection exists via t ...	CVSS3: 6.5	2% Низкий	больше 7 лет назад
GHSA-h9cp-8fw3-4wc5 An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.		2% Низкий	больше 4 лет назад
CVE-2018-18837 An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.	CVSS3: 6.1	2% Низкий	больше 7 лет назад
CVE-2018-18837 An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.	CVSS3: 6.1	2% Низкий	больше 7 лет назад
CVE-2018-18837 An issue was discovered in Netdata 1.10.0. HTTP Header Injection exist ...	CVSS3: 6.1	2% Низкий	больше 7 лет назад
GHSA-8mmg-j2hw-99h7 An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.	CVSS3: 6.1	2% Низкий	больше 4 лет назад
CVE-2018-18839 An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.	CVSS3: 5.3	2% Низкий	больше 7 лет назад
CVE-2018-18839 An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.	CVSS3: 5.3	2% Низкий	больше 7 лет назад
CVE-2018-18839 An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) ...	CVSS3: 5.3	2% Низкий	больше 7 лет назад
CVE-2018-18838 An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.	CVSS3: 7.5	2% Низкий	больше 7 лет назад
CVE-2018-18838 An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.	CVSS3: 7.5	2% Низкий	больше 7 лет назад
CVE-2018-18838 An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forge ...	CVSS3: 7.5	2% Низкий	больше 7 лет назад
GHSA-m69f-fhj3-wf8q DISPUTED An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional."	CVSS3: 5.3	2% Низкий	больше 4 лет назад
GHSA-hqrf-v6fm-gv6x An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.		2% Низкий	больше 4 лет назад

Уязвимостей на страницу