3758 matches found
Nagios IM Arbitrary Code Execution Vulnerability
Nagios Incident Manager IM is a network time manager from the US-based Nagios. The product is primarily used to manage and track network event history. A security vulnerability exists in Nagios IM versions prior to 2.2.7. An attacker can exploit the vulnerability to execute arbitrary code...
Nagios IM Authorization Bypass Vulnerability
Nagios Incident Manager IM is a network time manager from the US-based Nagios. The product is primarily used to manage and track network event history. A security vulnerability exists in Nagios IM versions prior to 2.2.7. An attacker can exploit this vulnerability to perform unauthorized operatio...
CVE-2019-9166
Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and importxiconfig.php...
CVE-2019-9167
Cross-site scripting XSS vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter...
CVE-2019-9166
Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and importxiconfig.php...
CVE-2019-9167
Cross-site scripting XSS vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter...
Privilege escalation
Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and importxiconfig.php...
Cross site scripting
Cross-site scripting XSS vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter...
CVE-2019-9204
SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...
CVE-2019-9202
Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...
CVE-2019-9203
Authorization bypass in Nagios IM component of Nagios XI before 2.2.7 allows closing incidents in IM via the API...
CVE-2019-9202
Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...
CVE-2019-9204
SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...
CVE-2019-9165
SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id...
CVE-2019-9165
SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id...
CVE-2019-9203
Authorization bypass in Nagios IM component of Nagios XI before 2.2.7 allows closing incidents in IM via the API...
Sql injection
SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id...
Authorization
Authorization bypass in Nagios IM component of Nagios XI before 2.2.7 allows closing incidents in IM via the API...