3760 matches found
CVE-2020-16157
Nagios Log Server (versions prior to 2.1.7) contains a Stored XSS vulnerability exploitable via the Notification Methods → Email Users menu. The root cause is insufficient input validation in the web application, allowing injected scripts to be stored and later executed in the admin/user context....
CVE-2020-16157
A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods - Email Users menu...
PT-2020-14779 · Nagios · Nagios Log Server
Name of the Vulnerable Software and Affected Versions: Nagios Log Server versions prior to 2.1.7 Description: A Stored XSS issue exists via the Notification Methods - Email Users menu. Recommendations: For versions prior to 2.1.7, update to version 2.1.7 or later to resolve the issue...
HPE nagios plugin for iLO code injection vulnerability
HPE nagios plugin for iLO is a Nagios plugin from Hewlett Packard Enterprise HPE for monitoring the operation of HP servers. A code injection vulnerability exists in HPE nagios plugin for iLO v1.50 and earlier nagios-plugins-hpilo. The vulnerability stems from a network system or product that doe...
Nagios XI Cross-Site Scripting Vulnerability (CNVD-2020-41877)
Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in Graph Explorer in Nagios XI versions prior to 5.7.2. An attacker can exploit this...
Nagios XI Arbitrary Command Execution Vulnerability (CNVD-2020-64267)
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. An arbitrary command execution vulnerability exists in the ajaxhelper.php file in Nagios XI versions prior ...
CVE-2020-15901
In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys...
CVE-2020-15902
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...
CVE-2020-15902
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...
CVE-2020-15901
In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys...
Command injection
In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys...
Design/Logic Flaw
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...
CVE-2020-15901
In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys...
CVE-2020-15901
This CVE affects Nagios XI prior to 5.7.3 where the ajaxhelper.php script is vulnerable to command injection via the cmdsubsys parameter. The root cause is insufficient validation/input handling in ajaxhelper.php, enabling remote authenticated attackers to execute arbitrary commands. The NVD note...
CVE-2020-15902
The CVE-2020-15902 issue affects Nagios XI Graph Explorer prior to 5.7.2, where the link url option is vulnerable to cross-site scripting due to improper validation in visFunctions.inc.php. This leads to XSS when an attacker crafts a malicious link parameter. Affected product is Nagios XI with Gr...
CVE-2020-15902
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...
PT-2020-14699 · Nagios · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.7.3 Description: The issue allows remote authenticated attackers to execute arbitrary commands via cmdsubsys in ajaxhelper.php. Recommendations: For versions prior to 5.7.3, update to version 5.7.3 or later to...
PT-2020-14700 · Nagios · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.7.2 Description: The issue allows for XSS via the link url option in the Graph Explorer component. This could potentially lead to malicious script execution. Recommendations: For versions prior to 5.7.2, update t...