Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Grafana
MEDIUM 6.1
Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require ma…
Grafana
HIGH 8.1
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who…
Grafana
HIGH 7.5
Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer tha…
Grafana
CRITICAL 9.8
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by i…
Grafana
MEDIUM 6.1
A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to …
Grafana
HIGH 8.8
The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficie…
Alloy
HIGH 7.8
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Al…
Agent
HIGH 7.8
Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM This issu…
Oncall
CRITICAL 9.1
Grafana OnCall is an easy-to-use on-call management tool that will help reduce toil in on-call management through simpler workflows and interfaces th…
Grafana
HIGH 8.8
A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user acc…
Json Api Data Source
HIGH 8.0
The JSON datasource plugin ( https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ ) is a Grafana Labs maintained plugin for Grafana that…
Grafana
MEDIUM 5.3
Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that a…
Grafana
MEDIUM 5.4
A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "veri…
Worldmap Panel
MEDIUM 6.1
Grafana is an open-source platform for monitoring and observability. The WorldMap panel plugin, versions before 1.0.4 contains a DOM XSS vulnerabil…
Grafana
HIGH 7.2
Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Request security is a deny list that allows admins to c…
Google Sheets
HIGH 7.5
Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, versions 0.9.0 to 1.2.2 are v…
Grafana
HIGH 7.2
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allo…
Grafana
CRITICAL 9.8
Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. …
Grafana
MEDIUM 6.4
Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available from the user panel UI for us…
Grafana
MEDIUM 5.3
Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sources using m…
Grafana
HIGH 7.5
Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a J…
Grafana
MEDIUM 5.4
Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team…
Grafana
MEDIUM 5.4
Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch, Grafana had a stored XSS vulnerability affecting…
Grafana
MEDIUM 5.4
Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the tr…
Grafana
HIGH 8.8
Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including …
Grafana
MEDIUM 5.4
Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions 8.5.16, 9.2.10, and 9.3.4, Gr…
Enterprise Metrics
HIGH 8.8
A vulnerability in the label-based access control of Grafana Labs Grafana Enterprise Metrics allows an attacker more access than intended. If an acce…
Grafana
MEDIUM 5.3
Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a POST request is made to the …
Grafana
HIGH 8.1
Grafana is an open-source platform for monitoring and observability. Versions prior to 9.2.4, or 8.5.15 on the 8.X branch, are subject to Improper In…
Grafana
HIGH 8.1
Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the…