Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/11/18 6:2 p.m.1 views

CVE-2025-34322

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the...

8.6CVSS7.5AI score0.00404EPSS
Exploits0References1
OSV
OSV
added 2025/11/17 6:15 p.m.0 views

CVE-2025-34322

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the...

7.2CVSS6.1AI score0.00404EPSS
Exploits0References4
NVD
NVD
added 2025/11/17 6:15 p.m.2 views

CVE-2025-34322

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the...

8.6CVSS0.00404EPSS
Exploits0References4
EUVD
EUVD
added 2025/11/17 5:48 p.m.1 views

EUVD-2025-197845

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability via the experimental 'Natural Language Queries' feature. Configuration values for this feature are read from the application settings and incorporated into a system command without adequate...

8.6CVSS7.5AI score0.00404EPSS
Exploits0References4
CVE
CVE
added 2025/11/17 5:48 p.m.6 views

CVE-2025-34322

Nagios Log Server (before 2026R1.0.1) is affected by an authenticated command-injection in the experimental Natural Language Queries feature. The issue arises when user-controlled settings (including model selection and connection parameters) are read from global configuration and concatenated in...

8.6CVSS7.5AI score0.00404EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/17 5:48 p.m.1 views

CVE-2025-34322 Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the...

8.6CVSS7.1AI score0.00404EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/11/17 5:48 p.m.4 views

CVE-2025-34322 Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the...

8.6CVSS0.00404EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.2 views

PT-2025-47178

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2026R1.0.1 Description Nagios Log Server versions prior to 2026R1.0.1 have an authenticated command injection issue through the 'Natural Language Queries' feature. The application reads configuration values...

8.6CVSS7.7AI score0.00404EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.1 views

Nagios Log Server 安全漏洞

Nagios Log Server is a suite of centralized log management, monitoring, and analysis software from Nagios Corporation. A security vulnerability exists in Nagios Log Server versions prior to 2026R1.0.1, which stems from a command injection vulnerability in the experimental Natural Language Queries...

8.6CVSS7.5AI score0.00404EPSS
Exploits0References4
Rows per page
Query Builder