CVE-2019-13484

In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c...

CVE-2019-13274

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter...

CVE-2019-13455

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c...

CVE-2019-13273

CVE-2019-13273 affects Xymon up to version 4.3.28, where the csvinfo CGI script contains a buffer overflow caused by a crafted GET request that triggers an sprintf on the srcdb parameter. This is a server-side vulnerability in the web interface (csvinfo.c) that can lead to memory corruption. The ...

CVE-2019-13273

In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb parameter...

CVE-2019-13274

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter...

CVE-2019-13274

In CVE-2019-13274, the affected software is Xymon up to version 4.3.28, where the csvinfo CGI script is vulnerable due to insufficient filtering of the db parameter, enabling a cross-site scripting (XSS) issue. The connected sources consistently describe the vulnerability and its presence in Xymo...

CVE-2019-13274

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter...

CVE-2019-13455

Xymon is affected by CVE-2019-13455:

CVE-2019-13455

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c...

CVE-2019-13484

Xymon ≤ 4.3.28 contains a buffer overflow in the status-log viewer CGI caused by expansion in appfeed.c. This CVE-2019-13484 entry is documented across multiple sources (NVD, OSV, Debian/Ubuntu trackers, Nessus/NASL plugins, etc.), consistently stating the flaw exists in the status-log viewer com...

CVE-2019-13484

In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c...

CVE-2019-13455: Out-of-bounds Write

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c...

CVE-2019-13273: Out-of-bounds Write

In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb parameter...

CVE-2019-13484: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c...

CVE-2019-13274: Improper Neutralization of Input During Web Page Generation

In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter...

CVE-2019-15503

The CVE-2019-15503 in AltaVoz Prontus (ProntusCMS) up to version 12.0.3.0 is tied to an Improper Neutralization of Special Elements used in an OS Command (command injection) in cgi-cpn/xcoding/prontus_videocut.cgi. It allows an attacker to execute OS commands via an HTTP GET parameter, enabling r...

PT-2019-13362

Name of the Vulnerable Software and Affected Versions Xymon versions prior to 4.3.29 Description A buffer overflow issue exists in the status-log viewer CGI of Xymon due to expansion in appfeed.c. Recommendations For versions prior to 4.3.29, update to version 4.3.29 or later to resolve the issue...

PT-2019-13227

Name of the Vulnerable Software and Affected Versions Xymon versions prior to 4.3.29 Description A buffer overflow issue exists in the csvinfo CGI script. This can be exploited by sending a crafted GET request to the "/cgi-bin/csvinfo" API endpoint, which triggers an sprintf of the srcdb paramete...

PT-2019-13345

Name of the Vulnerable Software and Affected Versions Xymon versions prior to 4.3.29 Description A stack-based buffer overflow issue exists in the alert acknowledgment CGI tool due to expansion in acknowledge.c. Recommendations For versions prior to 4.3.29, update to version 4.3.29 or later to...