https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:46:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01927 bdu:2024-01927 https://cve.radiocsirt.org/vuln/bdu:2024-01927 https://cve.radiocsirt.org/vuln/bit-grafana-2024-1442 <p><strong>Affected:</strong> Bitnami: grafana</p> <p>A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.</p> <p><strong>Affected:</strong> Bitnami: grafana</p> <p>A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.</p> https://cve.radiocsirt.org/vuln/bit-grafana-2024-1442 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0193 certfr-2024-avi-0193 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0193 https://cve.radiocsirt.org/vuln/euvd-2026-203691 EUVD-2026-203691 https://cve.radiocsirt.org/vuln/euvd-2026-203691 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1442 <p>A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.</p> <p>A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1442 https://cve.radiocsirt.org/vuln/ghsa-5mxf-42f5-j782 <p><strong>Affected:</strong> Go: github.com/grafana/grafana</p> <p>A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.</p> <p><strong>Affected:</strong> Go: github.com/grafana/grafana</p> <p>A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.</p> https://cve.radiocsirt.org/vuln/ghsa-5mxf-42f5-j782 https://cve.radiocsirt.org/vuln/gsd-2024-1442 gsd-2024-1442 https://cve.radiocsirt.org/vuln/gsd-2024-1442 https://cve.radiocsirt.org/vuln/rhsa-2024:2633 <p>HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients grafana: Improper priviledge managent for users with data source permissions</p> <p>HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients grafana: Improper priviledge managent for users with data source permissions</p> https://cve.radiocsirt.org/vuln/rhsa-2024:2633 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1442 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1442 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0585 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0585