3760 matches found
CVE-2020-13977
Mode C: Nagios 4.4.5 is affected by CVE-2020-13977. An attacker with existing administrative access can modify the ArchiveJSON/StatusJSON/CGI logic by crafting archivejson.cgi, objectjson.cgi, and statusjson.cgi, enabling changes to the Alert Histogram and Trends code. Mageia advisory MGASA-2021-...
[SECURITY] Fedora 32 Update: nrpe-4.0.2-2.fc32
Nrpe is a system daemon that will execute various Nagios plugins locally on behalf of a remote monitoring host that uses the checknrpe plugin. Various plugins that can be executed by the daemon are available at: http://sourceforge.net/projects/nagiosplug This package provides the core agent...
Nagios Log Server Cross-Site Scripting (CVE-2020-6586)
A stored cross-site scripting vulnerability exists in Nagios Log Server. This vulnerability is due to insufficient validation of user profile information in the user profile page...
Centreon 19.10.5 - (id) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Centreon 19.10.5 - 'id' SQL Injection Exploit Author: Basim alabdullah Vendor Homepage: https://www.centreon.com Software Link: https://download.centreon.com/ Version: v.19.10.5 Tested on: Centos 5 EXECUTIVE SUMMARY Centreon has...
Centreon 19.10.5 SQL Injection
Exploit Title: Centreon 19.10.5 - 'id' SQL Injection Date: 2020-04-19 Exploit Author: Basim alabdullah Vendor Homepage: https://www.centreon.com Software Link: https://download.centreon.com/ Version: v.19.10.5 Tested on: Centos 5 EXECUTIVE SUMMARY Centreon has come a long way from its early roots...
nagios.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1144614 Security Researcher Teamhash Helped patch 330 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting nagios.com website and its...
OPENSUSE-SU-2020:0517-1 Security update for nagios
This update for nagios to version 4.4.5 fixes the following issues: - CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. boo1156309 - CVE-2018-18245: Fixed XSS vulnerability in Alert Summary report...
openSUSE Security Update : nagios (openSUSE-2020-500)
This update for nagios to version 4.4.5 fixes the following issues : - CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. boo1156309 - CVE-2018-18245: Fixed XSS vulnerability in Alert Summary report...
Security update for nagios (moderate)
openSUSE Security Update: Security update for nagios Announcement ID: openSUSE-SU-2020:0517-1 Rating: moderate References: 1028975 1119832 1156309 Cross-References: CVE-2018-13441 CVE-2018-13457 CVE-2018-13458 CVE-2018-18245 CVE-2019-3698 Affected Products: openSUSE Backports SLE-15-SP1 An update...
[SECURITY] Fedora 31 Update: nrpe-4.0.2-2.fc31
Nrpe is a system daemon that will execute various Nagios plugins locally on behalf of a remote monitoring host that uses the checknrpe plugin. Various plugins that can be executed by the daemon are available at: http://sourceforge.net/projects/nagiosplug This package provides the core agent...
[SECURITY] Fedora 30 Update: nrpe-4.0.2-2.fc30
Nrpe is a system daemon that will execute various Nagios plugins locally on behalf of a remote monitoring host that uses the checknrpe plugin. Various plugins that can be executed by the daemon are available at: http://sourceforge.net/projects/nagiosplug This package provides the core agent...
openSUSE: Security Advisory for nagios (openSUSE-SU-2020:0500-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:0500-1 Security update for nagios
This update for nagios to version 4.4.5 fixes the following issues: - CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. boo1156309 - CVE-2018-18245: Fixed XSS vulnerability in Alert Summary report...
Security update for nagios (moderate)
openSUSE Security Update: Security update for nagios Announcement ID: openSUSE-SU-2020:0500-1 Rating: moderate References: 1028975 1119832 1156309 Cross-References: CVE-2018-13441 CVE-2018-13457 CVE-2018-13458 CVE-2018-18245 CVE-2019-3698 Affected Products: openSUSE Leap 15.1 An update that fixes...
NagiosXL 5.6.11 orderby SQL Injection
Title: Postauth SQL injection in NagiosXI 5.6.11 param: orderby Date: 13.03.2020 Vendor: https://www.nagios.com/ Vulnerable software: https://www.nagios.com/downloads/nagios-xi/vmware/ Repo: https://github.com/c610/free/ c@kali:$ cat n2.txt GET...
Nagios XI Cross-Site Scripting (CVE-2019-20139)
A cross-site scripting vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...
Nagios XI Cross-Site Scripting Vulnerability (CNVD-2020-19533)
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A cross-site scripting vulnerability exists in Nagios XI version 5.6.11. The vulnerability stems from the...
Nagios XI Cross-Site Scripting Vulnerability (CNVD-2020-19531)
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A cross-site scripting vulnerability exists in Nagios XI version 5.6.11. The vulnerability stems from the...
Nagios XI Cross-Site Scripting Vulnerability (CNVD-2020-19530)
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A cross-site scripting vulnerability exists in Nagios XI version 5.6.11. The vulnerability stems from the...
