Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2025/12/30 1:02 a.m.•26 views

CVE-2025-67255

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability...

8.8CVSS7.8AI score0.01104EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/29 7:15 p.m.•26 views

CVE-2025-67255

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability...

8.8CVSS0.01104EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/29 12:00 a.m.•60 views

CVE-2025-67255

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability...

0.01104EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/29 12:00 a.m.•11 views

CVE-2025-67255

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability...

7.8AI score0.01104EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•5 views

CVE-2025-67255: Improper Neutralization of Special Elements used in an SQL Command

In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability...

8.8CVSS7.8AI score0.01104EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/29 12:00 a.m.•45 views

CVE-2025-67255

The NagiosXI monitoring solution, specifically version 2026R1.0.1 build 1762361101 , is vulnerable to a SQL Injection flaw. The root cause is a lack of proper filtering and protective measures for dashboard parameters during query processing. This allows any authenticated user to exploit the vuln...

8.8CVSS7.8AI score0.01104EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•21 views

PT-2025-53775

Name of the Vulnerable Software and Affected Versions NagiosXI version 2026R1.0.1 build 1762361101 Description Dashboard parameters in the software do not have sufficient filtering, which allows authenticated users to exploit a SQL Injection issue. The vulnerability allows unauthorized access to...

7.4AI score0.01104EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-18314

Malware in sbrugna...

8.8CVSS8.8AI score0.00463EPSS
SaveExploits1References2
OSV
OSV
•added 2024/05/02 3:15 p.m.•34 views

CVE-2023-47727

IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation. IBM X-Force ID: 272089...

4.3CVSS5.8AI score0.00348EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/02 12:00 a.m.•5 views

CVE-2023-47727: Improper Validation of Specified Type of Input

IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation. IBM X-Force ID: 272089...

4.3CVSS5.8AI score0.00348EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/02 12:00 a.m.•17 views

PT-2024-5311 · Ibm · Ibm Cloud Pak For Security +1

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 IBM QRadar Suite Software versions 1.10.12.0 through 1.10.20.0 Description: The issue exists due to insufficient input validation, allowing a remote attacker to modify dashboard...

4.3CVSS7AI score0.00348EPSS
SaveExploits0References12
IBM Security Bulletins
IBM Security Bulletins
•added 2024/05/01 1:12 p.m.•33 views

Security Bulletin: IBM QRadar Suite software is vulnerable to injection attacks

Summary IBM QRadar Suite software is vulnerable to injection attacks through dashboard parameters. This has been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version...

4.3CVSS4.9AI score0.00348EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2020/04/21 12:00 a.m.•19 views

PrestaShop cross-site scripting vulnerability (CNVD-2020-25939)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the 'datefrom' and 'dateto' parameters...

6.1CVSS6.4AI score0.00809EPSS
SaveExploits0References1
Rows per page
Query Builder