Skip to contentNagios vulnerabilities
Newest
- nagios incident managerNagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary...CVE-2019-9202Public exploitEPSS 23.8%8.8 High
- nagios incident managerAuthorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents...CVE-2019-9203EPSS 20.4%9.8 Critical
- nagios incident managerSQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers...CVE-2019-9204EPSS 19.7%9.8 Critical
- nagios xiCommand injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary...CVE-2019-9164EPSS 46.0%8.8 High
- nagios xiAn issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss...CVE-2018-201726.1 Medium
- nagios xiAn issue was discovered in Nagios XI before 5.5.8. The url parameter of rss_dashlet/magpierss...CVE-2018-201716.1 Medium
- nagios core, debian linux +1 moreNagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a...CVE-2018-18245Fix available5.4 Medium
- nagios xiNagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via...CVE-2018-157146.1 Medium
- nagios xiNagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via...CVE-2018-157135.4 Medium
- nagios xiNagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via...CVE-2018-15712EPSS 48.6%6.1 Medium
- nagios xiNagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more...CVE-2018-15711EPSS 36.0%8.8 High
- nagios xiNagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via...CVE-2018-15710Public exploitEPSS 38.2%7.8 High
- nagios xiNagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted...CVE-2018-15709EPSS 21.0%8.8 High
- nagios xiSnoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary...CVE-2018-15708Public exploitEPSS 89.5%9.8 Critical
- nagiosA privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when...CVE-2016-8641Public exploit6.7 Medium
- nagios coreqh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability,...CVE-2018-13458Public exploitFix available5.5 Medium
- nagios coreqh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability,...CVE-2018-13457Public exploitFix available5.5 Medium
- nagiosqh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference...CVE-2018-13441Public exploitFix available5.5 Medium
- nagios fusionNagios Fusion before 4.1.4 has XSS, aka TPS#13332-13335.CVE-2018-125016.1 Medium
- nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php...CVE-2018-10738EPSS 41.4%7.2 High
- nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php...CVE-2018-10737EPSS 41.4%7.2 High
- nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1...CVE-2018-10736EPSS 41.7%7.2 High
- nagios xiA SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php...CVE-2018-10735EPSS 41.7%7.2 High
- nagios xiAn issue was discovered in Nagios XI 5.4.13. There is XSS exploitable via CSRF in (1) the...CVE-2018-105545.4 Medium
- nagios xiAn issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal...CVE-2018-10553EPSS 38.4%6.5 Medium
- nagios xiA privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an...CVE-2018-8736Public exploitEPSS 45.6%8.8 High
- nagios xiRemote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13...CVE-2018-8735Public exploitEPSS 63.6%8.8 High
- nagios xiSQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5...CVE-2018-8734Public exploitEPSS 53.8%9.8 Critical
- nagios xiAuthentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x...CVE-2018-8733Public exploitEPSS 26.6%9.8 Critical
- nagios business process intelligenceCross-site scripting (XSS) vulnerability in Nagios Business Process Intelligence (BPI) before 2.3...CVE-2015-36186.1 Medium
- nagios coreNagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration...CVE-2017-143127.8 High
- nagiosNagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root...CVE-2017-12847Fix available6.3 Medium
- nagiosThe Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin"...CVE-2016-07269.8 Critical
- nagiosCross-site scripting (XSS) vulnerability in Nagios.CVE-2016-62096.1 Medium
- snoopy, nagios, redhat openstack +2 moreSnoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists...CVE-2014-50099.8 Critical
- nagiosNagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the...CVE-2016-100897.8 High
- nagiosMagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote...CVE-2016-9565Public exploitEPSS 22.7%9.8 Critical
- nagiosbase/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the...CVE-2016-9566Public exploitFix available7.8 High
- snoopy, nagios, redhat openstack +2 moreThe _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE...CVE-2008-7313Fix available9.8 Critical
- nagioslib/parse_ini.c in Nagios Plugins 2.0.2 allows local users to obtain sensitive information via a...CVE-2014-4703Public exploit2.1 Low
- nagiosThe check_icmp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive...CVE-2014-47022.1 Low
- nagiosThe check_dhcp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive...CVE-2014-47012.1 Low
- nagios remote plugin executor, opensuse +1 more** DISPUTED ** Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor ...CVE-2014-2913Public exploitFix availableDisputedEPSS 15.3%7.5 High
- nagios pluginsThe IPXPING_COMMAND in contrib/check_ipxping.c in Nagios Plugins 1.4.16 allows local users to...CVE-2013-42154.4 Medium
- icinga, nagios +1 moreStack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0...CVE-2014-1878Fix available5.0 Medium
- nagiosstatus.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access...CVE-2013-22144.0 Medium
- nagiosOff-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0...CVE-2013-7205Fix available6.4 Medium
- icinga, nagios +1 moreMultiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9...CVE-2013-7108Public exploitFix availableEPSS 61.6%5.5 Medium
- nagios xiSQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios...CVE-2013-6875Public exploit7.5 High
- nagios, redhat openstack +1 morerss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1,...CVE-2013-42146.3 Medium
- Show moreLoading…