Lucene search
+L

186 matches found

CNNVD
CNNVD
added 2023/05/26 12:00 a.m.9 views

NagVis 路径遍历漏洞

NagVis is a program from NagVis Open Source. Used to visualize your chosen monitoring core data in a user-friendly way. A security vulnerability exists in Nagvis versions prior to 1.9.34, which stems from an arbitrary file read vulnerability in the /core/classes/NagVisHoverUrl.php file...

9.1CVSS6.5AI score0.04135EPSS
SaveExploits3References7
Debian CVE
Debian CVE
added 2023/05/26 12:00 a.m.22 views

CVE-2022-46945

Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php...

9.1CVSS6AI score0.04135EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2023/05/26 12:00 a.m.5 views

PT-2023-15107 · Nagvis +1 · Nagvis +1

Name of the Vulnerable Software and Affected Versions: Nagvis versions prior to 1.9.34 Description: The issue is related to an arbitrary file read vulnerability. It affects the component /core/classes/NagVisHoverUrl.php. Recommendations: For versions prior to 1.9.34, update to version 1.9.34 or...

9.1CVSS6.1AI score0.04135EPSS
SaveExploits8References24
Cvelist
Cvelist
added 2023/05/26 12:00 a.m.30 views

CVE-2022-46945

Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php...

9.1CVSS9.5AI score0.04135EPSS
SaveExploits3References3
CVE
CVE
added 2023/05/26 12:00 a.m.73 views

CVE-2022-46945

CVE-2022-46945 affects NagVis prior to 1.9.34, allowing an arbitrary file read via /core/classes/NagVisHoverUrl.php. Affected software is NagVis; root cause is improper file read handling in that component. Impact is exposure of sensitive files (confidentiality). Remediation: upgrade to 1.9.34 or...

9.1CVSS6.5AI score0.04135EPSS
SaveExploits3References4Affected Software1
OSV
OSV
added 2023/05/26 12:00 a.m.16 views

CVE-2022-46945

Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php...

9.1CVSS7.6AI score
SaveExploits0References6
GithubExploit
GithubExploit
added 2023/03/27 10:30 p.m.473 views

Exploit for Improper Input Validation in Checkmk

CVE-2022-46836 - Remote Code Execution This exploit abuses an...

9.1CVSS9.7AI score0.01126EPSS
SaveExploits2
Veracode
Veracode
added 2022/11/16 6:22 p.m.24 views

Incorrect Type Conversion

nagvis is vulnerable to Incorrect type conversion. The vulnerability exists due to manipulation of the argument hash in the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php which allows an attacker to cause an application crash...

8.1CVSS8.8AI score0.01017EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2022/11/13 11:15 p.m.26 views

CVE-2022-3979

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

8.1CVSS0.01017EPSS
SaveExploits1References6
OSV
OSV
added 2022/11/13 11:15 p.m.5 views

DEBIAN-CVE-2022-3979

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

8.1CVSS4.7AI score0.01017EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/13 11:15 p.m.7 views

UBUNTU-CVE-2022-3979

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

8.1CVSS5AI score0.01017EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2022/11/13 11:15 p.m.27 views

CVE-2022-3979

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

8.1CVSS5.6AI score0.01017EPSS
SaveExploits1References2
Prion
Prion
added 2022/11/13 11:15 p.m.16 views

Type confusion

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

5.1CVSS8.1AI score0.01017EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2022/11/13 12:00 a.m.93 views

CVE-2022-3979

NagVis up to 1.9.33 is affected by CVE-2022-3979 in the checkAuthCookie function of share/server/core/classes/CoreLogonMultisite.php, where argument hash manipulation leads to incorrect type conversion and may enable remote authentication cookie guessing. Exploitation is described as remote with ...

8.1CVSS6.7AI score0.01017EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
added 2022/11/13 12:00 a.m.26 views

CVE-2022-3979

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

8.1CVSS6AI score0.01017EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/11/13 12:00 a.m.25 views

CVE-2022-3979 NagVis CoreLogonMultisite.php checkAuthCookie type conversion

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

5.6CVSS8.4AI score0.01017EPSS
SaveExploits1References5
OSV
OSV
added 2022/11/13 12:00 a.m.15 views

CVE-2022-3979 NagVis CoreLogonMultisite.php checkAuthCookie type conversion

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

5.6CVSS5.1AI score
SaveExploits0References8
CNNVD
CNNVD
added 2022/11/13 12:00 a.m.10 views

NagVis 代码问题漏洞

NagVis is a program from NagVis Open Source. Used to visualize your chosen monitoring core data in a user-friendly way. A code issue vulnerability exists in NagVis 1.9.33 and earlier versions, which stems from an affected function checkAuthCookie in the file...

8.1CVSS6.3AI score0.01017EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2022/11/13 12:00 a.m.6 views

PT-2022-24995 · Nagvis +1 · Nagvis +1

Name of the Vulnerable Software and Affected Versions: NagVis versions up to 1.9.33 Description: A vulnerability was found in the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The...

9.1CVSS6.1AI score0.04135EPSS
SaveExploits8References26
The Hacker News
The Hacker News
added 2022/11/02 1:11 p.m.47 views

Multiple Vulnerabilities Reported in Checkmk IT Infrastructure Monitoring Software

Multiple vulnerabilities have been disclosed in Checkmk IT Infrastructure monitoring software that could be chained together by an unauthenticated, remote attacker to fully take over affected servers. "These vulnerabilities can be chained together by an unauthenticated, remote attacker to gain co...

0.8AI score
SaveExploits0
Rows per page
Query Builder