CVE-2018-20171

An issue was discovered in Nagios XI before 5.5.8. The url parameter of rssdashlet/magpierss/scripts/magpiesimple.php is not filtered, resulting in an XSS vulnerability...

CVE-2018-18245

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified checkload plugin to NRPE...

CVE-2018-18245

CVE-2018-18245 : Nagios Core 4.4.2 is vulnerable to a cross-site scripting (XSS) in the alert summary reports of plugin results, demonstrated by a SCRIPT element delivered via a modified check_load plugin to NRPE. The issue stems from user-facing output in the alert summary report, enabling injec...

CVE-2018-20171

Summary of CVE-2018-20171 (Nagios XI): Nagios XI builds prior to 5.5.8 are affected by an XSS vulnerability in the url parameter of rss_dashlet/magpierss/scripts/magpie_simple.php where the parameter is not filtered. This can allow a user-assisted or external attacker to inject script in contexts...

CVE-2018-18245

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified checkload plugin to NRPE...

Nagios XI Snoopy Unauthorized Remote Command Execution Vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from Nagios, USA. The solution supports monitoring and alerting of applications, services, operating systems, etc. Snoopy is one of the PHP classes that emulates a Web browser. A security vulnerability exists in Snoopy version 1.0 in...

GLSA-201812-03 : Nagios: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201812-03 Nagios: Privilege escalation A vulnerability in Nagios was discovered due to the improper handling of configuration files which can be owned by a non-root user. Impact : A local attacker can escalate privileges to root b...

Nagios: Privilege escalation

Background Nagios is an open source host, service and network monitoring program. Description A vulnerability in Nagios was discovered due to the improper handling of configuration files which can be owned by a non-root user. Impact A local attacker can escalate privileges to root by leveraging...

Nagios XI Cross-Site Scripting Vulnerability (CNVD-2018-23144)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in Nagios XI 5.5.6. A remote authenticated attacker can exploit this vulnerability to...

Nagios XI Arbitrary Command Execution Vulnerability

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. An arbitrary command execution vulnerability exists in Nagios XI 5.5.6. A remote authenticated attacker can exploit this vulnerability...

Nagios XI elevation of privilege vulnerability (CNVD-2018-23141)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. An elevation of privilege vulnerability exists in Nagios XI 5.5.6. A locally authenticated attacker can exploit this vulnerability to...

Nagios XI < 5.5.7 Multiple Vulnerabilities

Nagios XI is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagiosxi"; if description...

Nagios XI Cross-Site Scripting Vulnerability (CNVD-2018-23145)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in Nagios XI 5.5.6. A remote, unauthenticated attacker can exploit this vulnerability to...

Nagios XI Unauthorized API Key Regeneration Vulnerability

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. Nagios XI 5.5.6 suffers from an unauthorized API key regeneration vulnerability. A remote authenticated attacker can exploit this...

Nagios XI Cross-Site Scripting Vulnerability (CNVD-2018-23143)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in Nagios XI 5.5.6. A remote, unauthenticated attacker can exploit this vulnerability via...

Cross site scripting

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the oname and oname2 parameters...

CVE-2018-15713

Nagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via the stored email address in admin/users.php...

Cross site scripting

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in apitool.php...

CVE-2018-15712

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in apitool.php...

CVE-2018-15711

Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The attacker can then use the new API key to execute API calls at elevated privileges...