Lucene search
K

11 matches found

NVD
NVD
added 2026/05/29 8:16 p.m.11 views

CVE-2026-45324

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmdsearch.c:bytepatternsearch due wrong pointer ownership declared. This vulnerability is fixed by commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe...

3.3CVSS0.00017EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/31 10:8 p.m.1 views

CVE-2023-7318

Nagios XI versions prior to 2024R1.0.2 are vulnerable to cross-site scripting XSS via the Nagios Core Command Expansion page. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS6.3AI score0.00703EPSS
Exploits0References1
NVD
NVD
added 2025/10/30 10:15 p.m.3 views

CVE-2023-7318

Nagios XI versions prior to 2024R1.0.2 are vulnerable to cross-site scripting XSS via the Nagios Core Command Expansion page. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS0.00703EPSS
Exploits0References3
OSV
OSV
added 2025/10/30 10:15 p.m.1 views

CVE-2023-7318

Nagios XI versions prior to 2024R1.0.2 are vulnerable to cross-site scripting XSS via the Nagios Core Command Expansion page. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS5.9AI score0.00703EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/30 9:51 p.m.3 views

CVE-2023-7318 Nagios XI < 2024R1.0.2 XSS via Core Command Expansion

Nagios XI versions prior to 2024R1.0.2 are vulnerable to cross-site scripting XSS via the Nagios Core Command Expansion page. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS0.00703EPSS
Exploits0References3
CVE
CVE
added 2025/10/30 9:51 p.m.5 views

CVE-2023-7318

Nagios XI

5.4CVSS5.9AI score0.00703EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/30 9:51 p.m.1 views

CVE-2023-7318 Nagios XI < 2024R1.0.2 XSS via Core Command Expansion

Nagios XI versions prior to 2024R1.0.2 are vulnerable to cross-site scripting XSS via the Nagios Core Command Expansion page. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS5.9AI score0.00703EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.2 views

PT-2025-44556

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.0.2 Description Nagios XI versions prior to 2024R1.0.2 are susceptible to cross-site scripting XSS through the Nagios Core Command Expansion page. The issue stems from inadequate validation or escaping of...

5.4CVSS6.1AI score0.00703EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.0 views

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.0.2 that stems from the Nagios Core...

5.4CVSS6AI score0.00703EPSS
Exploits0References3
OSV
OSV
added 2025/05/09 7:16 a.m.1 views

UBUNTU-CVE-2025-37887

In the Linux kernel, the following vulnerability has been resolved: pdscore: handle unsupported PDSCORECMDFWCONTROL result If the FW doesn't support the PDSCORECMDFWCONTROL command the driver might at the least print garbage and at the worst crash when the user runs the "devlink dev info" devlink...

5.5CVSS6.2AI score0.00065EPSS
Exploits0References26
Debian CVE
Debian CVE
added 2025/05/09 6:45 a.m.7 views

CVE-2025-37887

In the Linux kernel, the following vulnerability has been resolved: pdscore: handle unsupported PDSCORECMDFWCONTROL result If the FW doesn't support the PDSCORECMDFWCONTROL command the driver might at the least print garbage and at the worst crash when the user runs the "devlink dev info" devlink...

5.5CVSS5.6AI score0.00065EPSS
Exploits0
Rows per page
Query Builder