Skip to contentNagios vulnerabilities
Newest
- nagios fusion, xi +1 moreInsufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5...CVE-2020-289009.8 Critical
- nagios network analyzerSelf Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.CVE-2021-28924EPSS 10.4%6.1 Medium
- nagios network analyzerSQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to...CVE-2021-289259.8 Critical
- nagios xiNagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php...CVE-2021-32737.2 High
- nagios xiNagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user...CVE-2020-24899Fix availableEPSS 17.3%8.8 High
- nagios xiNagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated user...CVE-2020-22427DisputedEPSS 14.9%7.2 High
- nagios xiNagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in...CVE-2021-25299EPSS 97.8%6.1 Medium
- nagios xiNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the...CVE-2021-25298In KEVPublic exploitEPSS 73.6%8.8 High
- nagios xiNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the...CVE-2021-25297In KEVPublic exploitEPSS 56.7%8.8 High
- nagios xiNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the...CVE-2021-25296In KEVPublic exploitEPSS 71.9%8.8 High
- nagios favoritesThe Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object...CVE-2021-26024EPSS 19.2%5.3 Medium
- nagios favoritesThe Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS.CVE-2021-26023EPSS 25.5%6.1 Medium
- nagios xiImproper access and command validation in the Docker config wizard of Nagios XI before 5.8.0...CVE-2021-31939.8 Critical
- nagios log serverNagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver...CVE-2020-25385EPSS 16.4%6.1 Medium
- nagios xiAn issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line...CVE-2020-35578Public exploitEPSS 81.9%7.2 High
- nagios coreThere is a Cross Site Request Forgery (CSRF) vulnerability in Nagios Core 4.2.4.CVE-2020-352698.8 High
- nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field).CVE-2020-27991EPSS 34.4%5.4 Medium
- nagios xiNagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent).CVE-2020-27990EPSS 34.4%5.4 Medium
- nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard).CVE-2020-27989EPSS 34.4%5.4 Medium
- nagios xiNagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field).CVE-2020-27988EPSS 90.4%5.4 Medium
- nagios xiImproper input validation in the Auto-Discovery component of Nagios XI before 5.7.5 allows an...CVE-2020-286488.8 High
- nagios xiImproper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged,...CVE-2020-57967.8 High
- nagios xiImproper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a...CVE-2020-5791Public exploitEPSS 78.6%7.2 High
- nagios xiCross-site request forgery in Nagios XI 5.7.3 allows a remote attacker to perform sensitive...CVE-2020-57906.5 Medium
- nagios xiImproper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote,...CVE-2020-5792Public exploitEPSS 63.5%7.2 High
- nagios xiAn issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in...CVE-2020-159039.8 Critical
- nagios log serverA Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods ...CVE-2020-16157EPSS 14.4%5.4 Medium
- nagios xiajaxhelper.php in Nagios XI before 5.7.2 allows remote attackers to execute arbitrary commands...CVE-2020-15901EPSS 21.9%8.8 High
- nagios xiGraph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.CVE-2020-15902EPSS 35.1%6.1 Medium
- nagios, fedoraproject fedora +1 moreNagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for...CVE-2020-13977Fix available4.9 Medium
- nagios xiNagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.CVE-2020-10819EPSS 71.3%4.8 Medium
- nagios xiNagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.CVE-2020-10820EPSS 19.1%4.8 Medium
- nagios xiNagios XI 5.6.11 allows XSS via the account/main.php theme parameter.CVE-2020-10821EPSS 71.3%4.8 Medium
- fedoraproject fedora, nagios remote plug in executor +1 moreNagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small...CVE-2020-6582Fix available7.5 High
- fedoraproject fedora, nagios remote plug in executor +1 moreNagios NRPE 3.2.1 has Insufficient Filtering because, for example, nasty_metachars interprets \n...CVE-2020-6581Fix available7.3 High
- nagiosNagios Log Server 2.1.3 has Incorrect Access Control.CVE-2020-65846.5 Medium
- nagiosNagios Log Server 2.1.3 has CSRF.CVE-2020-65858.8 High
- nagiosNagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is...CVE-2020-6586EPSS 19.0%5.4 Medium
- nagios, opensuse factory, suse linux enterprise server 11 +3 more +5 morenagios cron job allows privilege escalation from user nagios to rootCVE-2019-36985.7 Medium
- nagios xiIn Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell...CVE-2019-20197Public exploitEPSS 22.6%8.8 High
- nagios xiIn Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup...CVE-2019-20139EPSS 26.1%5.4 Medium
- nagios xiNagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to...CVE-2019-15949In KEVPublic exploitEPSS 77.0%8.8 High
- nagios log serverNagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.CVE-2019-158986.1 Medium
- nagios xiNagios XI before 5.5.4 has XSS in the auto login admin management page.CVE-2018-171474.8 Medium
- nagios xiA cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter...CVE-2018-171465.4 Medium
- nagios xiAn Insufficient Access Control vulnerability (leading to credential disclosure) in...CVE-2018-171489.8 Critical
- nagios xiNagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the...CVE-2019-12279Public exploitDisputed9.8 Critical
- nagios xiCross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject...CVE-2019-9167EPSS 21.7%6.1 Medium
- nagios xiPrivilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to...CVE-2019-91667.8 High
- nagios xiSQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL...CVE-2019-91659.8 Critical
- Show moreLoading…