CVE-2020-10820

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ password parameter...

CVE-2020-10819

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...

CVE-2020-10821

Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter...

Cross site scripting

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ password parameter...

Cross site scripting

Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter...

Cross site scripting

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...

CVE-2020-10819

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...

CVE-2020-10819

CVE-2020-10819 affects Nagios XI 5.6.11 with a cross-site scripting (XSS) vulnerability in the web interface, specifically via the includes/components/ldap_ad_integration/ username parameter. The root cause is lack of proper validation of client-side data by the WEB application, according to mult...

CVE-2020-10820

CVE-2020-10820 affects Nagios XI 5.6.11. The issue is a Cross-Site Scripting (XSS) vulnerability in the web interface, exploitable via the includes/components/ldap_ad_integration/ password parameter. The CVE entry provides the vulnerability description and CVSS metrics (NVD: CVSSv2 base score 3.5...

CVE-2020-10820

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ password parameter...

CVE-2020-10821

CVE-2020-10821 affects Nagios XI 5.6.11 via an XSS vulnerability exposed by the theme parameter in account/main.php. The Red Hat/CNVD/NVD entries corroborate a cross-site scripting flaw in Nagios XI 5.6.11, with CNVD noting lack of proper validation of client-side data as the likely root cause. C...

CVE-2020-10821

Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter...

Nagios NRPE Insufficient Filtering Vulnerability

Nagios NRPE is an extension of Nagios to execute plug-in programs on remote Linux/Unix hosts. An insufficient filtering vulnerability exists in Nagios NRPE 3.2.1. The vulnerability stems from nastymetachars interpreting n as a character and the character n instead of the n newline sequence. An...

Nagios Log Server Cross-Site Scripting Vulnerability (CNVD-2020-17470)

Nagios Log Server is a powerful enterprise-grade log monitoring and management application that allows organizations to quickly and easily view, sort, and configure logs from any source on any given network. A cross-site scripting vulnerability exists in Nagios Log Server 2.1.3. An attacker can...

Nagios Log Server Incorrect Access Control Vulnerability

Nagios Log Server is a powerful enterprise-grade log monitoring and management application that allows organizations to quickly and easily view, sort, and configure logs from any source on any given network. An incorrect access control vulnerability exists in Nagios Log Server 2.1.3. An attacker...

Nagios NRPE Heap Buffer Overflow Vulnerability

Nagios NRPE is an extension of Nagios to execute plug-in programs on remote Linux/Unix hosts. A heap buffer overflow vulnerability exists in Nagios NRPE 3.2.1. An attacker could exploit this vulnerability to cause a denial of service...

Nagios Log Server Cross-Site Request Forgery Vulnerability

Nagios Log Server is a powerful enterprise-grade log monitoring and management application that allows organizations to quickly and easily view, sort, and configure logs from any source on any given network. A cross-site request forgery vulnerability exists in Nagios Log Server 2.1.3. An attacker...

ALPINE-CVE-2020-6581

Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...

CVE-2020-6581

Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...

CVE-2020-6582

Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call...