Lucene search
+L

959 matches found

osv_debian
osv_debian
•added 2025/03/26 5:15 p.m.•20 views

DEBIAN-CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS5.6AI score0.00269EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/03/26 5:15 p.m.•30 views

CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS5.6AI score0.00269EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/26 5:15 p.m.•37 views

CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS0.00269EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/03/26 5:15 p.m.•24 views

DEBIAN-CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

5.4CVSS5.8AI score0.00253EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/03/26 5:15 p.m.•36 views

CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

5.4CVSS5.8AI score0.00253EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/26 5:15 p.m.•43 views

CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

5.4CVSS0.00253EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2025/03/26 5:15 p.m.•24 views

UBUNTU-CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

5.4CVSS5.8AI score0.00253EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2025/03/26 5:15 p.m.•13 views

UBUNTU-CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS5.6AI score0.00269EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2025/03/26 4:15 p.m.•9 views

DEBIAN-CVE-2025-27406

Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act...

7.6CVSS5.7AI score0.00328EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/26 4:15 p.m.•28 views

CVE-2025-27406

Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act...

7.6CVSS0.00328EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2025/03/26 4:15 p.m.•26 views

CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

7.6CVSS5.8AI score0.00332EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/03/26 4:15 p.m.•12 views

DEBIAN-CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

6.1CVSS5.8AI score0.00332EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/26 4:15 p.m.•49 views

CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

7.6CVSS0.00332EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2025/03/26 4:15 p.m.•20 views

UBUNTU-CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

7.6CVSS5.8AI score0.00332EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2025/03/26 4:15 p.m.•18 views

UBUNTU-CVE-2025-27406

Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act...

7.6CVSS5.7AI score0.00328EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/26 4:13 p.m.•43 views

CVE-2025-30164 Icinga Web 2 has open redirect on login page

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

4.1CVSS0.00269EPSS
SaveExploits0References3
Mend
Mend
•added 2025/03/26 4:13 p.m.•6 views

CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS5.6AI score0.00269EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/03/26 4:13 p.m.•7 views

CVE-2025-30164 Icinga Web 2 has open redirect on login page

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

4.1CVSS5.6AI score0.00269EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/03/26 4:13 p.m.•20 views

CVE-2025-30164 Icinga Web 2 has open redirect on login page

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

4.1CVSS5.6AI score0.00269EPSS
SaveExploits0References5
CVE
CVE
•added 2025/03/26 4:13 p.m.•85 views

CVE-2025-30164

The CVE-2025-30164 issue in Icinga Web 2 is an open redirect vulnerability affecting versions before 2.11.5 and 2.12.13, where an authenticated (or easily authenticated) user could be redirected to an arbitrary location via a crafted URL. The root cause is the backend’s redirect logic allowing ar...

6.1CVSS5.6AI score0.00269EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder