Show filters
155 Total Results
Displaying 71-80 of 155
Sort by:
Attacker Value
Unknown
CVE-2020-15901
Disclosure Date: July 22, 2020 (last updated November 28, 2024)
In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.
0
Attacker Value
Unknown
CVE-2020-7206
Disclosure Date: July 17, 2020 (last updated February 21, 2025)
HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability.
0
Attacker Value
Unknown
CVE-2020-13977
Disclosure Date: June 09, 2020 (last updated February 21, 2025)
Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408.
0
Attacker Value
Unknown
CVE-2020-10819
Disclosure Date: March 22, 2020 (last updated February 21, 2025)
Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.
0
Attacker Value
Unknown
CVE-2020-10821
Disclosure Date: March 22, 2020 (last updated February 21, 2025)
Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.
0
Attacker Value
Unknown
CVE-2020-10820
Disclosure Date: March 22, 2020 (last updated February 21, 2025)
Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.
0
Attacker Value
Unknown
CVE-2020-6585
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
Nagios Log Server 2.1.3 has CSRF.
0
Attacker Value
Unknown
CVE-2020-6586
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered.
0
Attacker Value
Unknown
CVE-2020-6584
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
Nagios Log Server 2.1.3 has Incorrect Access Control.
0
Attacker Value
Unknown
CVE-2019-3698
Disclosure Date: February 28, 2020 (last updated February 21, 2025)
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
0
