CoreCVE

CVE Browser

More filters (active)

Page 1

Vendor: Graphite Remove filter Clear all
CVE-2026-50593 HIGH

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within…

CVSS 7.3 EPSS 0.16% Jun 5, 2026
CVE-2022-4730 MEDIUM

Graphite Web Absolute Time Range cross site scripting

CVSS 5.4 EPSS 0.79% Dec 24, 2022
CVE-2022-4729 MEDIUM

Graphite Web Template Name cross site scripting

CVSS 5.4 EPSS 0.76% Dec 24, 2022
CVE-2022-4728 MEDIUM

Graphite Web Cookie cross site scripting

CVSS 5.4 EPSS 0.79% Dec 24, 2022
CVE-2017-18638 HIGH

graphite-web: graphite.composer.views.send_email vulnerable to SSRF

CVSS 8.7 EPSS 15.30% Oct 11, 2019
CVE-2013-5943 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vec…

CVSS 4.3 EPSS 1.75% Sep 27, 2013
CVE-2013-5942 CRITICAL

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object,…

CVSS 10.0 EPSS 2.12% Sep 27, 2013
CVE-2013-5093 CRITICAL

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote at…

CVSS 9.5 EPSS 38.67% Sep 27, 2013

Showing 1 to 8 CVEs · page 1