959 matches found
PT-2025-42511
Name of the Vulnerable Software and Affected Versions Icinga 2 versions 2.4 through 2.15.0 Description Icinga 2 is an open source monitoring system. Filter expressions provided to the /v1/objects API endpoints could access variables or objects that would otherwise be inaccessible for the user. Th...
Icinga code issues and vulnerabilities
Icinga is a scalable server, network resource monitoring system from Icinga, Germany. A code issue vulnerability exists in Icinga 2 versions 2.10.0 through 2.15.1 and prior, 2.14.7, and 2.13.13, which stems from the creation of an invalid reference that could lead to a segmentation error that cou...
CVE-2025-61908: NULL Pointer Dereference
Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an API endpoint that allows specifying a...
CVE-2025-61907: Exposure of Sensitive Information to an Unauthorized Actor
Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authenticated API users to learn information tha...
CVE-2025-61909: Execution with Unnecessary Privileges
Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...
CVE-2025-61789: Observable Response Discrepancy
Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values...
PT-2025-42512
Name of the Vulnerable Software and Affected Versions Icinga 2 versions 2.10.0 through 2.15.0 Icinga 2 version 2.13.12 and earlier Icinga 2 version 2.14.6 and earlier Description Icinga 2, an open source monitoring system, is susceptible to a denial-of-service condition. Creating an invalid...
Hidden/Protected custom variables are prone to filter enumeration
Icinga reports: An authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values assigned to it...
EUVD-2013-6893
Malware in sbrugna...
EUVD-2017-8053
Malware in sbrugna...
EUVD-2021-19515
Malware in sbrugna...
EUVD-2014-1940
Malware in sbrugna...
EUVD-2013-6892
Malware in sbrugna...
EUVD-2015-7906
Malware in sbrugna...
EUVD-2014-2422
Malware in sbrugna...
EUVD-2012-3408
Malware in sbrugna...
EUVD-2021-19519
Malware in sbrugna...
EUVD-2021-19513
Malware in sbrugna...