CVE Browser

Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution

Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE

Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent

Netdata: WebSocket Decompression Bomb

Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair

Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write

Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK

Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint

ndsudo: local privilege escalation via untrusted search path

Netdata is vulnerable to improper authentication

Netdata vulnerable to command injection

The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Succe…