Skip to contentNagios vulnerabilities
Newest
- nagios xiA Cross-site scripting (XSS) vulnerability in Nagios XI version 5.11.1 and below allows...CVE-2023-409325.4 Medium
- nagios xiA SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows...CVE-2023-40931Public exploitEPSS 11.9%6.5 Medium
- nagios xiCross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via...CVE-2020-239926.1 Medium
- nagios ncpa, cross platform agent +1 moreNagios NCPA tail.html cross site scriptingCVE-2021-42853.5 Low
- nagios xiNagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the...CVE-2022-382474.8 Medium
- nagios xiNagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS)...CVE-2022-382486.1 Medium
- nagios xiNagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name...CVE-2022-382509.8 Critical
- nagios xiNagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR...CVE-2022-382496.1 Medium
- nagios xiNagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the...CVE-2022-382514.8 Medium
- nagios xiNagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via...CVE-2022-382546.1 Medium
- nagios xiIn Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that...CVE-2022-292726.1 Medium
- nagios xiIn Nagios XI through 5.8.5, a read-only Nagios user (due to an incorrect permission check) is...CVE-2022-292716.5 Medium
- nagios xiIn Nagios XI through 5.8.5, it is possible for a user without password verification to change his...CVE-2022-292704.3 Medium
- nagios xiIn Nagios XI through 5.8.5, in the schedule report function, an authenticated attacker is able to...CVE-2022-292696.5 Medium
- nagios xiAn issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an...CVE-2021-40344EPSS 64.8%7.2 High
- nagios xiAn issue was discovered in Nagios XI 5.8.5. Insecure file permissions on the nagios_unbundler.py...CVE-2021-403437.8 High
- nagios xiAn issue was discovered in Nagios XI 5.8.5. In the Manage Dashlets section of the Admin panel, an...CVE-2021-40345Public exploitEPSS 22.7%7.2 High
- nagios xiThe general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated...CVE-2021-33179EPSS 11.7%6.1 Medium
- nagios xiThe Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL...CVE-2021-33177EPSS 10.1%8.8 High
- nagios xiNagios Enterprises NagiosXI <= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability...CVE-2021-372236.5 Medium
- nagios xiNagios XI before 5.8.5 incorrectly allows manage_services.sh wildcards.CVE-2021-363669.8 Critical
- nagios xiNagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.CVE-2021-363659.8 Critical
- nagios xiNagios XI before 5.8.5 incorrectly allows backup_xi.sh wildcards.CVE-2021-363649.8 Critical
- nagios xiNagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php.CVE-2021-363639.8 Critical
- nagios xiIn Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative...CVE-2021-38156EPSS 92.9%5.4 Medium
- nagios xiA path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component...CVE-2021-37343Public exploitEPSS 23.8%8.8 High
- nagios xi switch wizardNagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through...CVE-2021-37344EPSS 96.8%9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is...CVE-2021-373457.8 High
- nagios xi watchguard wizardNagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through...CVE-2021-37346EPSS 73.6%9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh...CVE-2021-373477.8 High
- nagios xiNagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation...CVE-2021-373487.5 High
- nagios xiNagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php...CVE-2021-373497.8 High
- nagios xiNagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications...CVE-2021-37350EPSS 79.2%9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated...CVE-2021-373515.3 Medium
- nagios xiAn open redirect vulnerability exists in Nagios XI before version 5.8.5 that could lead to...CVE-2021-373526.1 Medium
- nagios xi docker wizardNagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in...CVE-2021-373539.8 Critical
- nagios log serverNagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert...CVE-2021-35479EPSS 13.2%5.4 Medium
- nagios log serverNagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history...CVE-2021-35478EPSS 76.6%5.4 Medium
- nagios xiNagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper...CVE-2021-3277EPSS 59.0%7.2 High
- nagios fusionIncorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated...CVE-2020-289116.5 Medium
- nagios xiCreation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows...CVE-2020-289109.8 Critical
- nagios fusionIncorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to...CVE-2020-289098.8 High
- nagios fusionCommand Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios.CVE-2020-289089.8 Critical
- nagios fusionIncorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of...CVE-2020-289079.8 Critical
- nagios fusion, xi +1 moreIncorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier...CVE-2020-289068.8 High
- nagios fusionImproper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to...CVE-2020-28905EPSS 26.2%8.8 High
- nagios fusionExecution with Unnecessary Privileges in Nagios Fusion 4.1.8 and earlier allows for Privilege...CVE-2020-289049.8 Critical
- nagios fusionImproper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with...CVE-2020-28903EPSS 13.2%6.1 Medium
- nagios fusionCommand Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to...CVE-2020-289029.8 Critical
- nagios fusionCommand Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation or Code...CVE-2020-28901EPSS 11.9%9.8 Critical
- Show moreLoading…