Known vulnerabilities in grafana-debuginfo

Vendor: openEuler
Software: grafana-debuginfo
Software CPE: cpe:2.3:o:openeuler:grafana-debuginfo:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 21
Public exploits: 1
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting grafana-debuginfo grafana-debuginfo is affected by 21 known vulnerabilities: 1 high, 10 medium, 10 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 7.5.15-6 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU72132 - Improper Authentication
CVE-2022-39229		 CWE-287 Low
No
No
 7.5.15-7 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 13 more
#VU72131 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39201		 CWE-200 Medium
No
No
 9.2.10-1 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 12 more
#VU72130 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31130		 CWE-200 Medium
No
No
 9.2.10-1 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 11 more
#VU72128 - Improper Verification of Cryptographic Signature
CVE-2022-31123		 CWE-347 Medium
No
No
 9.2.10-1 11.02.2023 SB2023021201
SB2023021202
SB2023021203
and 15 more
#VU71567 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23552		 CWE-79 Low
No
No
 9.2.10-1 26.01.2023 SB2023012632
SB2023032032
SB2023032033
and 10 more
#VU71566 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-39324		 CWE-451 Low
No
No
 9.2.10-1 26.01.2023 SB2023012631
SB2023032032
SB2023032033
and 12 more
#VU69485 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39307		 CWE-200 Medium
No
No
 9.2.10-1 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU69484 - Improper input validation
CVE-2022-39306		 CWE-20 Medium
No
No
 9.2.10-1 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU68557 - Authentication Bypass Using an Alternate Path or Channel
CVE-2022-35957		 CWE-288 Low
No
No
 9.2.10-1 20.10.2022 SB2022092614
SB2022102094
SB2023050969
and 16 more
#VU67646 - Permissions, Privileges, and Access Controls
CVE-2022-36062		 CWE-264 Medium
No
No
 9.2.10-1 26.09.2022 SB2022092614
SB2022102094
SB2023062230
and 10 more
#VU66066 - Security Features
CVE-2022-32148		 CWE-254 Medium
No
No
 7.5.15-6 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31097		 CWE-79 Low
No
No
 9.2.10-1 15.07.2022 SB2022071510
SB2022102094
SB2022102641
and 16 more
#VU65353 - Improper Authentication
CVE-2022-31107		 CWE-287 High
No
No
 7.5.15-3 15.07.2022 SB2022071510
SB2022072642
SB2022072643
and 21 more
#VU64402 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21673		 CWE-200 Low
No
No
 7.5.11-3 15.06.2022 SB2022061623
SB2022062026
SB2022081215
and 12 more
#VU64399 - Cross-Site Request Forgery (CSRF)
CVE-2022-21703		 CWE-352 Medium
No
No
 7.5.15-1 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702		 CWE-79 Low
No
No
 7.5.11-4, 7.5.15-3 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key
CVE-2022-21713		 CWE-639 Low
No
No
 7.5.15-1 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 13 more
#VU63461 - Improper input validation
CVE-2022-29170		 CWE-20 Low
No
No
 7.5.15-2 19.05.2022 SB2022051916
SB2024012352
SB2024012403
and 3 more
#VU57320 - Improper Access Control
CVE-2021-39226		 CWE-284 Medium
Available
Exploited
 7.5.15-3 12.10.2021 SB2021101262
SB2021101320
SB2021101321
and 22 more


Showing elements 1 - 20 out of 21