Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-41115 | Incorrect privilege assignment |
Grafana |
Grafana Enterprise |
2025-11-21T14:25:38.945Z | 2026-08-27T17:22:52.092Z | |
| cve-2026-33376 | Auth Proxy IPv6 whitelist bypass |
Grafana |
Grafana OSS |
2026-05-13T19:28:34.473Z | 2026-08-27T17:22:50.919Z | |
| cve-2026-21728 | Tempo query limit results in unbounded memory allocation |
Grafana |
Tempo |
2026-04-24T08:00:47.074Z | 2026-08-27T17:22:50.209Z | |
| cve-2026-27880 | OpenFeature evaluation API reads input data with no bounds |
Grafana |
Grafana |
2026-03-27T14:12:20.075Z | 2026-08-27T17:22:49.478Z | |
| cve-2026-33378 | Grafana Data Source Plugin: DoS (OOM) via Negative Int… |
Grafana |
Grafana OSS |
2026-05-13T19:28:37.606Z | 2026-08-27T17:22:48.777Z | |
| cve-2026-27877 | Public dashboards discloses all direct mode datasources |
Grafana |
Grafana |
2026-03-27T14:02:11.889Z | 2026-08-27T17:22:48.099Z | |
| cve-2026-21720 | Unauthenticated DoS: avatar cache leaks goroutines whe… |
Grafana |
grafana/grafana-enterprise |
2026-01-27T09:07:04.758Z | 2026-08-27T17:22:47.419Z | |
| cve-2026-33381 | Users can generate Service Account tokens after permis… |
Grafana |
Grafana OSS |
2026-05-13T19:28:31.559Z | 2026-08-27T17:22:46.706Z | |
| cve-2026-8595 | Stored XSS in the table panel (TableNG) |
Grafana |
Grafana OSS |
2026-07-10T14:59:35.891Z | 2026-08-27T17:22:45.998Z | |
| cve-2026-28376 | Grafana Live push endpoint allows unbounded memory all… |
Grafana |
Grafana OSS |
2026-05-13T19:28:26.544Z | 2026-08-27T17:22:45.329Z | |
| cve-2026-21727 | Grafana Correlations: Cross-Tenant Data Disclosure and… |
Grafana |
Grafana Correlations |
2026-04-15T18:57:25.185Z | 2026-08-27T17:22:44.594Z | |
| cve-2026-17033 | CVE-2026-17033 CVE Record |
Grafana |
Grafana OSS |
2026-08-24T13:52:26.910Z | 2026-08-27T17:22:43.827Z | |
| cve-2026-10601 | Path traversal in the Tempo and Loki data source plugins |
Grafana |
Grafana OSS |
2026-06-22T13:18:31.531Z | 2026-08-27T17:22:42.795Z | |
| cve-2026-21722 | Public Dashboards time range restriction on annotation… |
Grafana |
grafana/grafana |
2026-02-12T08:49:05.678Z | 2026-08-27T17:22:42.160Z | |
| cve-2026-33375 | Grafana MSSQL Data Source Plugin: Restriction Bypass L… |
Grafana |
Grafana OSS |
2026-03-26T20:05:52.564Z | 2026-08-27T17:22:41.503Z | |
| cve-2026-28380 | BAC in Snapshot API allows deletion of unauthorized da… |
Grafana |
Grafana OSS |
2026-05-13T19:28:32.257Z | 2026-08-27T17:22:39.589Z | |
| cve-2026-28378 | Cross-Organization Public Dashboard Deletion via Missi… |
Grafana |
Grafana Enterprise |
2026-07-07T21:08:04.579Z | 2026-08-27T17:22:38.899Z | |
| cve-2026-28374 | IDOR in Annotations API allows unprivileged users to D… |
Grafana |
Grafana OSS |
2026-05-13T19:28:40.053Z | 2026-08-27T17:22:38.240Z | |
| cve-2026-8609 | Pre-authentication denial of service via the OAuth log… |
Grafana |
Grafana OSS |
2026-07-10T14:58:33.522Z | 2026-08-27T17:22:37.575Z | |
| cve-2026-19197 | Broken access control in dashboard snapshots |
Grafana |
Grafana OSS |
2026-08-26T08:50:27.854Z | 2026-08-27T17:22:36.904Z | |
| cve-2026-42127 | Pre-authentication denial of service in the public das… |
Grafana |
Grafana Enterprise |
2026-06-22T16:31:28.096Z | 2026-08-27T17:22:36.246Z | |
| cve-2026-21729 | Loki detected_fields query limits results in unbounded… |
Grafana |
Loki |
2026-07-16T03:12:07.912Z | 2026-08-27T17:22:35.582Z | |
| cve-2026-28377 | S3 SSE-C Encryption Key Exposed in Plaintext via Confi… |
Grafana |
Tempo |
2026-03-26T21:39:46.928Z | 2026-08-27T17:22:34.956Z | |
| cve-2026-27878 | Tempo TraceQL query with exemplar hint could result in… |
Grafana |
Enterprise Traces (GET) |
2026-06-19T19:02:27.028Z | 2026-08-27T17:22:34.267Z | |
| cve-2026-21721 | Dashboard Permissions Scope Bypass Enables Cross‑Dashb… |
Grafana |
grafana/grafana |
2026-01-27T09:07:55.160Z | 2026-08-27T17:22:33.569Z | |
| cve-2026-42129 | Path traversal in the Loki data source plugin |
Grafana |
Grafana OSS |
2026-06-22T13:18:27.365Z | 2026-08-27T17:22:32.860Z | |
| cve-2026-33377 | Dashboard Import Overwrites ACL — Editor Privilege Esc… |
Grafana |
Grafana OSS |
2026-05-13T19:28:28.154Z | 2026-08-27T17:22:32.185Z | |
| cve-2026-17183 | CVE-2026-17183 CVE Record |
Grafana |
Grafana OSS |
2026-08-19T17:30:06.798Z | 2026-08-27T17:22:31.524Z | |
| cve-2026-21726 | Loki Path Traversal - CVE-2021-36156 Bypass |
Grafana |
Loki |
2026-04-15T19:24:31.268Z | 2026-08-27T17:22:30.899Z | |
| cve-2026-21725 | Authorization Bypass via TOCTOU in Grafana Datasource … |
Grafana |
Grafana |
2026-02-25T12:35:43.104Z | 2026-08-27T17:22:30.280Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-307 | Vulnérabilité dans QNAP HBS 3 Hybrid Backup Sync | 2021-04-22T00:00:00.000000 | 2021-04-22T00:00:00.000000 |
| certfr-2021-avi-306 | Vulnérabilité dans IBM WebSphere Application Server | 2021-04-22T00:00:00.000000 | 2021-04-22T00:00:00.000000 |
| certfr-2021-avi-305 | Multiples vulnérabilités dans Google Chrome OS | 2021-04-22T00:00:00.000000 | 2021-04-22T00:00:00.000000 |
| certfr-2021-avi-304 | Vulnérabilité dans Drupal | 2021-04-22T00:00:00.000000 | 2021-04-22T00:00:00.000000 |
| certfr-2021-avi-303 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-04-22T00:00:00.000000 | 2021-04-22T00:00:00.000000 |
| certfr-2021-avi-302 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-04-22T00:00:00.000000 | 2021-04-22T00:00:00.000000 |
| certfr-2021-avi-301 | Multiples vulnérabilités dans Google Chrome | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-300 | Multiples vulnérabilités dans Oracle WebLogic | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-299 | Multiples vulnérabilités dans Oracle Systems | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-298 | Multiples vulnérabilités dans Oracle Virtualization | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-297 | Multiples vulnérabilités dans Oracle Java SE | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-296 | Multiples vulnérabilités dans Oracle MySQL | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-295 | Multiples vulnérabilités dans Oracle Database | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-294 | Vulnérabilité dans Symantec Security Analytics | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-293 | Vulnérabilité dans IBM WebSphere Application Server | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-292 | Multiples vulnérabilités dans les produits Aruba | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-291 | Vulnérabilité dans Sonicwall Email Security | 2021-04-21T00:00:00.000000 | 2021-04-21T00:00:00.000000 |
| certfr-2021-avi-290 | Multiples vulnérabilités dans les produits Juniper | 2021-04-20T00:00:00.000000 | 2021-04-20T00:00:00.000000 |
| certfr-2021-avi-289 | Vulnérabilité dans IBM WebSphere | 2021-04-20T00:00:00.000000 | 2021-04-20T00:00:00.000000 |
| certfr-2021-avi-288 | Multiples vulnérabilités dans F5 BIG-IP | 2021-04-20T00:00:00.000000 | 2021-04-20T00:00:00.000000 |
| certfr-2021-avi-287 | Multiples vulnérabilités dans Mozilla Firefox | 2021-04-20T00:00:00.000000 | 2021-04-20T00:00:00.000000 |
| certfr-2021-avi-286 | Multiples vulnérabilités dans Mozilla Thunderbird | 2021-04-20T00:00:00.000000 | 2021-04-20T00:00:00.000000 |
| certfr-2021-avi-285 | Vulnérabilité dans VMware NSX-T | 2021-04-19T00:00:00.000000 | 2021-04-19T00:00:00.000000 |
| certfr-2021-avi-284 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-04-19T00:00:00.000000 | 2021-04-19T00:00:00.000000 |
| certfr-2021-avi-283 | Vulnérabilité dans Juniper Junos OS | 2021-04-19T00:00:00.000000 | 2021-04-19T00:00:00.000000 |
| certfr-2021-avi-282 | Multiples vulnérabilités dans les produits Qnap | 2021-04-19T00:00:00.000000 | 2021-04-19T00:00:00.000000 |
| certfr-2021-avi-281 | Vulnérabilité dans OpenSSH | 2021-04-19T00:00:00.000000 | 2021-04-19T00:00:00.000000 |
| certfr-2021-avi-280 | Multiples vulnérabilités dans Mitel MiCollab | 2021-04-19T00:00:00.000000 | 2021-04-19T00:00:00.000000 |
| certfr-2021-avi-279 | Multiples vulnérabilités dans Microsoft Edge | 2021-04-16T00:00:00.000000 | 2021-04-16T00:00:00.000000 |
| certfr-2021-avi-278 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-04-16T00:00:00.000000 | 2021-04-16T00:00:00.000000 |