Lucene search
+L

254 matches found

RedhatCVE
RedhatCVE
added 2025/03/28 6:22 p.m.16 views

CVE-2025-27404

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

7.6CVSS7.2AI score0.00561EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/28 6:12 p.m.14 views

CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS6.8AI score0.00249EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/03/27 12:14 a.m.6 views

SUSE CVE-2025-27404

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

7.6CVSS6.8AI score0.00561EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/03/27 12:14 a.m.6 views

SUSE CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

6.1CVSS6.8AI score0.00306EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/03/27 12:14 a.m.3 views

SUSE CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

5.4CVSS6.8AI score0.00228EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/03/27 12:13 a.m.2 views

SUSE CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS6.6AI score0.00249EPSS
Exploits0References3
NVD
NVD
added 2025/03/26 5:15 p.m.23 views

CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS0.00249EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2025/03/26 5:15 p.m.8 views

CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS6.8AI score0.00249EPSS
Exploits0References3
OSV
OSV
added 2025/03/26 5:15 p.m.4 views

DEBIAN-CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS5.3AI score0.00249EPSS
Exploits0References1
NVD
NVD
added 2025/03/26 5:15 p.m.31 views

CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

5.4CVSS0.00228EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2025/03/26 5:15 p.m.13 views

CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

5.4CVSS7.2AI score0.00228EPSS
Exploits0References3
OSV
OSV
added 2025/03/26 5:15 p.m.5 views

DEBIAN-CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

5.4CVSS5.7AI score0.00228EPSS
Exploits0References1
OSV
OSV
added 2025/03/26 5:15 p.m.6 views

UBUNTU-CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS5.8AI score0.00249EPSS
Exploits0References4
OSV
OSV
added 2025/03/26 5:15 p.m.8 views

UBUNTU-CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

5.4CVSS5.9AI score0.00228EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2025/03/26 4:15 p.m.6 views

CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

7.6CVSS7.2AI score0.00306EPSS
Exploits0References3
NVD
NVD
added 2025/03/26 4:15 p.m.34 views

CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

7.6CVSS0.00306EPSS
Exploits0References3
OSV
OSV
added 2025/03/26 4:15 p.m.4 views

DEBIAN-CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

6.1CVSS5.7AI score0.00306EPSS
Exploits0References1
OSV
OSV
added 2025/03/26 4:15 p.m.6 views

UBUNTU-CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

7.6CVSS5.9AI score0.00306EPSS
Exploits0References4
OSV
OSV
added 2025/03/26 4:13 p.m.13 views

CVE-2025-30164 Icinga Web 2 has open redirect on login page

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

4.1CVSS6.2AI score0.00249EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/03/26 4:13 p.m.28 views

CVE-2025-30164 Icinga Web 2 has open redirect on login page

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

4.1CVSS0.00249EPSS
Exploits0References3
Rows per page
Query Builder