PT-2023-3899 · Unknown · Pnp4Nagios

Name of the Vulnerable Software and Affected Versions: PNP4Nagios versions 0.6.26 and prior to version 81ebfc5 Description: The issue is related to a lack of CSRF protection in the AJAX controller of the PNP4Nagios performance analyzer, which is part of the Nagios network monitoring system. This...

PT-2023-3898 · Unknown · Pnp4Nagios

Name of the Vulnerable Software and Affected Versions: PNP4Nagios versions 0.6.26 through 81ebfc5 Description: The issue is related to stored XSS in the AJAX controller via the basket API and filters. This can be exploited by a remote attacker to perform cross-site scripting attacks. The...

SUSE CVE-2017-16834

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account...

CVE-2023-0270

The YaMaps for WordPress Plugin WordPress plugin before 0.6.26 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

WordPress plugin YaMaps for WordPress Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PNP4Nagios Elevation of Privilege Vulnerability

PNP4Nagios is a set of Nagios plug-ins that get performance data analyzed via plug-ins and store them automatically in the RRD database. An elevation of privilege vulnerability exists in PNP4Nagios version 0.6.26 and earlier. A local attacker can exploit this vulnerability to gain privileges...