Поиск уязвимостей
Количество 27
Количество 27
ALT-PU-2021-1708
ALT-PU-2021-1708: package `grafana` update to version 7.5.4-alt1
openSUSE-SU-2021:2662-1
Security update for grafana
openSUSE-SU-2021:1148-1
Security update for grafana
openSUSE-SU-2021:2675-1
Security update for SUSE Manager Client Tools
openSUSE-SU-2021:1162-1
Security update for SUSE Manager Client Tools
CVE-2021-27358
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
CVE-2021-27358
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
CVE-2021-27358
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
CVE-2021-27358
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unaut ...
GHSA-h5rh-w6vm-9ghc
Denial of service in Grafana
CVE-2021-27962
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVE-2021-27962
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVE-2021-27962
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVE-2021-27962
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4. ...
RLSA-2021:4226
Moderate: grafana security, bug fix, and enhancement update
ELSA-2021-4226
ELSA-2021-4226: grafana security, bug fix, and enhancement update (MODERATE)
GHSA-6858-383c-7xhr
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVE-2021-28148
One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance.
CVE-2021-28148
One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance.
CVE-2021-28148
One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-1708 ALT-PU-2021-1708: package `grafana` update to version 7.5.4-alt1 | CVSS3: 7.5 | больше 5 лет назад | |
 | openSUSE-SU-2021:2662-1 Security update for grafana | больше 5 лет назад | ||
| openSUSE-SU-2021:1148-1 Security update for grafana | около 5 лет назад | ||
| openSUSE-SU-2021:2675-1 Security update for SUSE Manager Client Tools | больше 5 лет назад | ||
| openSUSE-SU-2021:1162-1 Security update for SUSE Manager Client Tools | около 5 лет назад | ||
 | CVE-2021-27358 The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set. | CVSS3: 7.5 | 83% Высокий | больше 5 лет назад |
 | CVE-2021-27358 The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set. | CVSS3: 7.5 | 83% Высокий | больше 5 лет назад |
 | CVE-2021-27358 The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set. | CVSS3: 7.5 | 83% Высокий | больше 5 лет назад |
| CVE-2021-27358 The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unaut ... | CVSS3: 7.5 | 83% Высокий | больше 5 лет назад |
| GHSA-h5rh-w6vm-9ghc Denial of service in Grafana | CVSS3: 8.2 | 83% Высокий | больше 4 лет назад |
| CVE-2021-27962 Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access. | CVSS3: 7.1 | 2% Низкий | больше 5 лет назад |
| CVE-2021-27962 Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access. | CVSS3: 6.8 | 2% Низкий | больше 5 лет назад |
| CVE-2021-27962 Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access. | CVSS3: 7.1 | 2% Низкий | больше 5 лет назад |
| CVE-2021-27962 Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4. ... | CVSS3: 7.1 | 2% Низкий | больше 5 лет назад |
 | RLSA-2021:4226 Moderate: grafana security, bug fix, and enhancement update | около 5 лет назад | ||
| ELSA-2021-4226 ELSA-2021-4226: grafana security, bug fix, and enhancement update (MODERATE) | почти 5 лет назад | ||
| GHSA-6858-383c-7xhr Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access. | CVSS3: 7.1 | 2% Низкий | больше 4 лет назад |
| CVE-2021-28148 One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance. | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
| CVE-2021-28148 One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance. | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
| CVE-2021-28148 One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance. | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
Уязвимостей на страницу