Поиск уязвимостей
Количество 42
Количество 42
CVE-2026-33377
An Editor can overwrite a dashboard not owned by them to acquire admin ...
GHSA-5cv7-h7gr-wjgh
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
BDU:2026-07034
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с перезаписью списков контроля доступа, позволяющая нарушителю повысить свои привилегии
ROS-20260708-80-0036
Уязвимость grafana
ROS-20260708-73-0030
Уязвимость grafana
RLSA-2026:54243
Important: grafana security update
ELSA-2026-54243
ELSA-2026-54243: grafana security update (IMPORTANT)
CVE-2026-8609
An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).
CVE-2026-8609
An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).
CVE-2026-33382
Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.
CVE-2026-33382
Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.
ROS-20260728-80-0016
Уязвимость grafana
ROS-20260728-80-0014
Уязвимость grafana
ROS-20260728-73-0014
Уязвимость grafana
ROS-20260728-73-0012
Уязвимость grafana
GHSA-xcrv-g5fh-9wx2
Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.
GHSA-j7jj-549c-j492
An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).
BDU:2026-14126
Уязвимость маршрута авторизации OAuth платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2026-14093
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2026:21366-1
Security update for grafana
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2026-33377 An Editor can overwrite a dashboard not owned by them to acquire admin ... | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
| GHSA-5cv7-h7gr-wjgh An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege. | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-07034 Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с перезаписью списков контроля доступа, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
 | ROS-20260708-80-0036 Уязвимость grafana | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260708-73-0030 Уязвимость grafana | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
 | RLSA-2026:54243 Important: grafana security update | около 2 месяцев назад | ||
| ELSA-2026-54243 ELSA-2026-54243: grafana security update (IMPORTANT) | 3 месяца назад | ||
 | CVE-2026-8609 An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service). | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-8609 An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service). | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-33382 Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
| CVE-2026-33382 Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| ROS-20260728-80-0016 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| ROS-20260728-80-0014 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| ROS-20260728-73-0014 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| ROS-20260728-73-0012 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| GHSA-xcrv-g5fh-9wx2 Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| GHSA-j7jj-549c-j492 An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service). | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
| BDU:2026-14126 Уязвимость маршрута авторизации OAuth платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| BDU:2026-14093 Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | openSUSE-SU-2026:21366-1 Security update for grafana | 4 месяца назад |
Уязвимостей на страницу