Security advisories

critical2024-05-14

CVE-2022-39328-Grafana Race condition allowing privilege escalation

grafana/grafana · GHSA-vqc4-mpj8-jxch

high2024-05-14

CVE-2022-35957-Grafana Escalation from admin to server admin when auth proxy is used

grafana/grafana · GHSA-ff5c-938w-8c9q

medium2024-05-14

CVE-2022-31130-Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins

grafana/grafana · GHSA-jv32-5578-pxjc

high2024-05-14

CVE-2022-31123-Grafana Plugin signature bypass

grafana/grafana · GHSA-rhxj-gh46-jvw8

high2024-05-14

CVE-2022-31107-Grafana account takeover via OAuth vulnerability

grafana/grafana · GHSA-mx47-6497-3fv2

medium2024-05-14

CVE-2022-21713-Grafana API IDOR

grafana/grafana · GHSA-63g3-9jq3-mccv

medium2024-05-14

CVE-2022-31097-Grafana Stored Cross-site Scripting in Unified Alerting

grafana/grafana · GHSA-vw7q-p2qg-4m5f

medium2024-05-14

CVE-2022-21702-Grafana proxy Cross-site Scripting

grafana/grafana · GHSA-xc3p-28hw-q24g

low2024-05-14

CVE-2022-21673-Grafana Forward OAuth Identity Token can allow users to access some data sources

grafana/grafana · GHSA-8wjh-59cw-9xh4

medium2024-05-14

CVE-2021-43815-Grafana directory traversal for .cvs files

grafana/grafana · GHSA-7533-c8qv-jm9m

critical2024-05-14

CVE-2021-41244-Grafana Fine-grained access control vulnerability

grafana/grafana · GHSA-mpwp-42x6-4wmx

low2024-05-14

containerd started with non-empty inheritable Linux process capabilities

containerd/containerd · GHSA-c9cp-9c75-9v8c

low2024-05-14

CVE-2021-32026-NATS server TLS missing ciphersuite settings when CLI flags used

nats-io/nats-server · GHSA-jj54-5q2m-q7pj

high2024-05-14

CVE-2020-26312-dotmesh arbitrary file read and/or write

dotmesh-io/dotmesh · GHSA-hf54-fq2m-p9v6

medium2024-05-14

CVE-2024-31556-Reportico Web fails to invalidate cookies upon logout

reportico-web/reportico · GHSA-2q2f-h83x-cx3x

medium2024-05-14

CVE-2024-30046-Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability

dotnet/aspnetcore · GHSA-hhc7-x9w4-cw47

medium2024-05-14

CVE-2024-30045-Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability

dotnet/runtime · GHSA-7fcr-8qw6-92fr

medium2024-05-14

CVE-2024-34717-Anonymous PrestaShop customer can download other customers' invoices

prestashop/prestashop · GHSA-7pjr-2rgh-fc5g

critical2024-05-14

CVE-2024-34716-PrestaShop cross-site scripting via customer contact form in FO, through file upload

prestashop/prestashop · GHSA-45vm-3j38-7p78

low2024-05-14

CVE-2024-34713-sshproxy vulnerable to SSH option injection

cea-hpc/sshproxy · GHSA-jmqp-37m5-49wh