395 matches found
CVE-2020-6586
Nagios Log Server 2.1.3 has a stored XSS vulnerability. The issue arises from insufficient validation of the user profile information on the profile page; a malicious user with limited access can store an XSS payload in the Name field, which is then triggered when an admin views the /admin/users ...
CVE-2020-6584: Improper Privilege Management
Nagios Log Server 2.1.3 has Incorrect Access Control...
PT-2020-19174
Name of the Vulnerable Software and Affected Versions Nagios Log Server version 2.1.3 Description The issue concerns a CSRF problem. Recommendations For Nagios Log Server version 2.1.3, at the moment, there is no information about a newer version that contains a fix for this issue...
PT-2020-19175
Name of the Vulnerable Software and Affected Versions Nagios Log Server version 2.1.3 Description The issue allows for cross-site scripting XSS attacks by exploiting a crafted name field on the /profile page, which is then mishandled on the /admin/users page. This enables any malicious user with...
CVE-2020-6586: Improper Neutralization of Input During Web Page Generation
Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered...
PT-2020-19173
Name of the Vulnerable Software and Affected Versions Nagios Log Server version 2.1.3 Description The issue is related to Incorrect Access Control. Recommendations For Nagios Log Server version 2.1.3, at the moment, there is no information about a newer version that contains a fix for this...
CVE-2019-15898
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page...
CVE-2019-15898
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page...
Cross site scripting
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page...
CVE-2019-15898
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page...
CVE-2019-15898
Nagios Log Server prior to 2.0.8 is affected by a reflected XSS vulnerability on the login page via the username field. The issue is confirmed across multiple sources (NVD/Red Hat entry). No explicit remediation steps or patch details are described in the provided documents beyond noting the affe...
PT-2019-14462
Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2.0.8 Description The issue allows for Reflected XSS via the username on the "Login page" API endpoint. This occurs when an attacker sends a malicious request to the login page, which then reflects the attac...
CVE-2019-15898: Improper Neutralization of Input During Web Page Generation
Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page...
CVE-2018-7259
The FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account credentials to http://installLog.flightsimlabs.com/LogHandler3.ashx if a pirated serial number has been entered, which allows remote attackers to obtain sensitive information, e.g., by sniffing the networ...
log4j: Socket receiver deserialization vulnerability
It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...
Nagios Log Server Detection (HTTP)
HTTP based detection of Nagios Log Server. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.107058...
Nagios Log Server < 1.4.2 Multiple Vulnerabilities - Active Check
Nagios Log Server is prone to multiple vulnerabilities, including authentication bypass, stored cross-site scripting XSS, inconsistent authorization controls and privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenc...
Nagios Log Server < 1.4.2 Multiple Vulnerabilities
Binary data 9599.prm...