Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2018-18839

An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.

CVSS 3.0 · 5.3 Medium EPSS 1.9% KEV · Not listed
Vendors
My-netdata
Products
Netdata
CVE-2018-18838

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
My-netdata
Products
Netdata
CVE-2018-18837

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

CVSS 3.0 · 6.1 Medium EPSS 1.8% KEV · Not listed
Vendors
My-netdata
Products
Netdata
CVE-2018-18836

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
My-netdata
Products
Netdata