Количество 574
Количество 574
CVE-2021-27962
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVE-2021-27962
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVE-2021-27962
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVE-2021-27962
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4. ...
CVE-2020-24303
Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.
CVE-2020-24303
Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.
CVE-2020-24303
Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.
CVE-2020-24303
Grafana before 7.1.0-beta 1 allows XSS via a query alias for the Elast ...
CVE-2020-13430
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVE-2020-13430
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVE-2020-13430
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVE-2020-13430
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVE-2020-12459
In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.
CVE-2020-12459
In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.
CVE-2020-12245
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
CVE-2020-12245
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
CVE-2020-12245
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
CVE-2020-12245
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLi ...
CVE-2020-12052
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
CVE-2020-12052
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-27962 Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access. | CVSS3: 7.1 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-27962 Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access. | CVSS3: 6.8 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-27962 Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access. | CVSS3: 7.1 | 2% Низкий | больше 5 лет назад |
| CVE-2021-27962 Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4. ... | CVSS3: 7.1 | 2% Низкий | больше 5 лет назад |
| CVE-2020-24303 Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource. | CVSS3: 6.1 | 2% Низкий | почти 6 лет назад |
| CVE-2020-24303 Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource. | CVSS3: 6.1 | 2% Низкий | около 6 лет назад |
| CVE-2020-24303 Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource. | CVSS3: 6.1 | 2% Низкий | почти 6 лет назад |
| CVE-2020-24303 Grafana before 7.1.0-beta 1 allows XSS via a query alias for the Elast ... | CVSS3: 6.1 | 2% Низкий | почти 6 лет назад |
| CVE-2020-13430 Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. | CVSS3: 6.1 | 2% Низкий | около 6 лет назад |
| CVE-2020-13430 Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. | CVSS3: 6.1 | 2% Низкий | около 6 лет назад |
| CVE-2020-13430 Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. | CVSS3: 6.1 | 2% Низкий | около 6 лет назад |
| CVE-2020-13430 Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. | CVSS3: 6.1 | 2% Низкий | около 6 лет назад |
| CVE-2020-12459 In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable. | CVSS3: 6.2 | 0% Низкий | больше 6 лет назад |
| CVE-2020-12459 In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable. | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2020-12245 Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12245 Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12245 Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12245 Grafana before 6.7.3 allows table-panel XSS via column.title or cellLi ... | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-12052 Grafana version < 6.7.3 is vulnerable for annotation popup XSS. | CVSS3: 6.1 | 1% Низкий | больше 6 лет назад |
| CVE-2020-12052 Grafana version < 6.7.3 is vulnerable for annotation popup XSS. | CVSS3: 6.1 | 1% Низкий | больше 6 лет назад |
Уязвимостей на страницу