CVE-2021-37344

Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command OS Command injection...

Command injection

Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command OS Command injection...

Command injection

Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command OS Command injection...

CVE-2021-37353

Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in tablepopulation.php...

Design/Logic Flaw

Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in tablepopulation.php...

CVE-2021-37344

Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command OS Command injection...

CVE-2021-37344

CVE-2021-37344 affects Nagios XI Switch Wizard prior to version 2.5.7, with remote code execution via OS command injection caused by improper neutralization of special elements in OS commands. Affected product: Nagios XI Switch Wizard (Nagios XI platform). Root cause: improper filtering of specia...

CVE-2021-37346

CVE-2021-37346 affects Nagios XI WatchGuard Wizard prior to version 1.4.8. The vulnerability is an OS command injection caused by improper neutralisation of special elements in commands (insufficient input validation in watchguard.inc.php). Impact is remote code execution with the privileges of t...

CVE-2021-37353

Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in tablepopulation.php...

CVE-2021-37353

CVE-2021-37353 is an SSRF flaw in Nagios XI Docker Wizard prior to version 1.1.3, caused by improper sanitization in table_population.php. It is documented across multiple sources as part of Nagios XI vulnerabilities; remediation is to upgrade to Docker Wizard 1.13 or newer (as part of broader up...

Nagios XI 代码问题漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A code issue vulnerability exists in the Nagios XI Docker Wizard, which stems from improper cleanup in...

CVE-2021-37353: Server-Side Request Forgery (SSRF)

Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in tablepopulation.php...

PT-2021-21616

Name of the Vulnerable Software and Affected Versions Nagios XI WatchGuard Wizard versions prior to 1.4.8 Description The issue is related to remote code execution through improper neutralisation of special elements used in an OS Command, also known as OS Command injection. This allows for the...

Nagios XI 操作系统命令注入漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI Switch Wizard, which stems from the fact that Nagios XI...

Nagios XI 操作系统命令注入漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI Switch Wizard, which stems from the fact that Nagios XI Switc...

CVE-2021-37346: Improper Neutralization of Special Elements used in an OS Command

Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command OS Command injection...

PT-2021-21614

Name of the Vulnerable Software and Affected Versions Nagios XI Switch Wizard versions prior to 2.5.7 Description The issue is related to remote code execution through improper neutralisation of special elements used in an OS Command, also known as OS Command injection. This allows for the...

PT-2021-4142

Name of the Vulnerable Software and Affected Versions Nagios XI Docker Wizard versions prior to 1.1.3 Description The issue is related to a Server-Side Request Forgery SSRF vulnerability due to improper sanitation in the table population.php file. This vulnerability may allow a remote attacker to...

CVE-2021-37344: Improper Neutralization of Special Elements used in an OS Command

Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command OS Command injection...

Citrix Provisioning Services - Target Fails To BDM Boot When Running The Imaging Wizard

When using BDM to boot the Master Target Device to capture a new vDisk it fails to boot. With verbose mode enabled in the bootstrap you will see the Target download the bootstrap and then login to a PVS Server at which point it will sit at a black screen indefinitely...