Поиск уязвимостей
Количество 26
Количество 26
ALT-PU-2020-1966
ALT-PU-2020-1966: package `grafana` update to version 6.7.3-alt1
ELSA-2020-4682
ELSA-2020-4682: grafana security, bug fix, and enhancement update (MODERATE)
CVE-2020-11110
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
CVE-2020-11110
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
CVE-2020-11110
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
CVE-2020-11110
Grafana through 6.7.1 allows stored XSS due to insufficient input prot ...
GHSA-xr3x-62qw-vc4w
Grafana stored XSS
CVE-2020-12052
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
CVE-2020-12052
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
CVE-2020-12052
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
CVE-2020-12052
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
GHSA-46x4-c48q-4248
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
CVE-2020-12458
An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
CVE-2020-12458
An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
CVE-2020-12458
An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
CVE-2020-12458
An information-disclosure flaw was found in Grafana through 6.7.3. The ...
CVE-2020-12245
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
CVE-2020-12245
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
CVE-2020-12245
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
CVE-2020-12245
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLi ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2020-1966 ALT-PU-2020-1966: package `grafana` update to version 6.7.3-alt1 | CVSS3: 6.1 | больше 6 лет назад | |
| ELSA-2020-4682 ELSA-2020-4682: grafana security, bug fix, and enhancement update (MODERATE) | почти 6 лет назад | ||
 | CVE-2020-11110 Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot. | CVSS3: 5.4 | 10% Низкий | больше 6 лет назад |
 | CVE-2020-11110 Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot. | CVSS3: 6.1 | 10% Низкий | больше 6 лет назад |
 | CVE-2020-11110 Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot. | CVSS3: 5.4 | 10% Низкий | больше 6 лет назад |
| CVE-2020-11110 Grafana through 6.7.1 allows stored XSS due to insufficient input prot ... | CVSS3: 5.4 | 10% Низкий | больше 6 лет назад |
| GHSA-xr3x-62qw-vc4w Grafana stored XSS | CVSS3: 5.4 | 10% Низкий | больше 4 лет назад |
| CVE-2020-12052 Grafana version < 6.7.3 is vulnerable for annotation popup XSS. | CVSS3: 6.1 | 1% Низкий | больше 6 лет назад |
| CVE-2020-12052 Grafana version < 6.7.3 is vulnerable for annotation popup XSS. | CVSS3: 6.1 | 1% Низкий | больше 6 лет назад |
| CVE-2020-12052 Grafana version < 6.7.3 is vulnerable for annotation popup XSS. | CVSS3: 6.1 | 1% Низкий | больше 6 лет назад |
| CVE-2020-12052 Grafana version < 6.7.3 is vulnerable for annotation popup XSS. | CVSS3: 6.1 | 1% Низкий | больше 6 лет назад |
| GHSA-46x4-c48q-4248 Grafana version < 6.7.3 is vulnerable for annotation popup XSS. | 1% Низкий | больше 4 лет назад | |
| CVE-2020-12458 An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords). | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2020-12458 An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords). | CVSS3: 6.2 | 0% Низкий | больше 6 лет назад |
| CVE-2020-12458 An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords). | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2020-12458 An information-disclosure flaw was found in Grafana through 6.7.3. The ... | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2020-12245 Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12245 Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12245 Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12245 Grafana before 6.7.3 allows table-panel XSS via column.title or cellLi ... | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
Уязвимостей на страницу