Lucene search
K

1445 matches found

OSV
OSV
added 2024/09/17 2:15 p.m.1 views

UBUNTU-CVE-2024-38860

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

6.1CVSS5.8AI score0.00301EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/17 2:1 p.m.20 views

CVE-2024-38860 Reflected links in error message facilitate phishing attacks

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

5.1CVSS0.00301EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/09/17 12:0 a.m.2 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk versions 2.3.0 and 2.2.0 that stems from incorrect neutralization of inputs and allows an attacker to craft malicious links that could facilitate phishing attacks...

6.1CVSS6.5AI score0.00301EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/09/17 12:0 a.m.3 views

PT-2024-28242 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p16 Checkmk versions prior to 2.2.0p34 Description: The issue is related to improper neutralization of input, allowing attackers to craft malicious links that can facilitate phishing attacks. Recommendations: Fo...

6.1CVSS7.1AI score0.00301EPSS
Exploits0References9
NVD
NVD
added 2024/09/09 10:15 a.m.21 views

CVE-2024-6572

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 EOL allows man-in-the-middle attackers to intercept traffic...

7.4CVSS0.00338EPSS
Exploits0References1
OSV
OSV
added 2024/09/09 10:15 a.m.5 views

CVE-2024-6572

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 EOL allows man-in-the-middle attackers to intercept traffic...

6.3CVSS7AI score
Exploits0References1
OSV
OSV
added 2024/09/09 10:15 a.m.1 views

UBUNTU-CVE-2024-6572

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 EOL allows man-in-the-middle attackers to intercept traffic...

7.4CVSS5.8AI score0.00338EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/09 9:39 a.m.16 views

CVE-2024-6572 Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 EOL allows man-in-the-middle attackers to intercept traffic...

6.3CVSS6.8AI score0.00338EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/09 9:39 a.m.40 views

CVE-2024-6572 Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 EOL allows man-in-the-middle attackers to intercept traffic...

6.3CVSS0.00338EPSS
Exploits0References1
CVE
CVE
added 2024/09/09 9:39 a.m.52 views

CVE-2024-6572

CVE-2024-6572 affects Checkmk where improper host key checking in the active check Check SFTP Service and the VNX quotas and filesystem agent can enable man-in-the-middle interception. Publicly documented remediation versions are Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48, with 2.0.0 as EOL. CVSS metri...

7.4CVSS7.3AI score0.00338EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/09/09 12:0 a.m.4 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk versions prior to 2.3.0p15 that stems from incorrect active key checking for Check SFTP Service and VNX quotas and filesystem...

7.4CVSS6.5AI score0.00338EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/09/09 12:0 a.m.6 views

PT-2024-37728 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p15 Checkmk versions prior to 2.2.0p33 Checkmk versions prior to 2.1.0p48 Checkmk version 2.0.0 Description: The issue concerns improper host key checking in the active check 'Check SFTP Service' and the special...

7.4CVSS7AI score0.00338EPSS
Exploits0References15
NVD
NVD
added 2024/09/02 12:15 p.m.25 views

CVE-2024-38858

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view...

6.1CVSS0.00309EPSS
Exploits0References1
OSV
OSV
added 2024/09/02 12:15 p.m.10 views

CVE-2024-38858

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view...

6.1CVSS6.7AI score
Exploits0References1
OSV
OSV
added 2024/09/02 12:15 p.m.0 views

UBUNTU-CVE-2024-38858

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view...

6.1CVSS5.8AI score0.00309EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/02 9:16 a.m.14 views

CVE-2024-38858 Cross-site scripting in Robotmk logs view

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view...

2.3CVSS6.8AI score0.00309EPSS
Exploits0References1
CVE
CVE
added 2024/09/02 9:16 a.m.55 views

CVE-2024-38858

CVE-2024-38858 affects Checkmk versions before 2.3.0p14. The vulnerability is due to improper neutralization of user input in the Robotmk logs view, enabling an attacker to inject and execute malicious scripts. The issue is characterized as a cross-site scripting risk observed in multiple sources...

6.1CVSS6.2AI score0.00309EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/09/02 9:16 a.m.17 views

CVE-2024-38858 Cross-site scripting in Robotmk logs view

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view...

2.3CVSS0.00309EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/09/02 12:0 a.m.3 views

PT-2024-28239 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p14 Description: The issue is related to improper neutralization of input in Checkmk, allowing attackers to inject and run malicious scripts in the Robotmk logs view. This could potentially lead to arbitrary cod...

6.1CVSS7.8AI score0.00309EPSS
Exploits0References12
CNNVD
CNNVD
added 2024/09/02 12:0 a.m.3 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in versions prior to Checkmk 2.3.0p14 that stems from improper neutralization of user input. An attacker exploiting this vulnerability could inject and run malicious scripts in the Robotmk log view...

6.1CVSS6.3AI score0.00309EPSS
Exploits0References2
Rows per page
Query Builder