4004 matches found
Code injection
Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page...
CVE-2021-28924
Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page...
CVE-2021-28925
SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the ocol parameter to api/checks/read/...
Sql injection
SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the ocol parameter to api/checks/read/...
CVE-2021-28924
Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page...
CVE-2021-28924
CVE-2021-28924 affects Nagios Network Analyzer prior to 2.4.2. The issue is a Self Authenticated XSS in the nagiosna/groups/queries page. The vulnerability is a client-side scripting flaw that can be triggered by an authenticated user interacting with the affected page, potentially leading to arb...
CVE-2021-28925
SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the ocol parameter to api/checks/read/...
CVE-2021-28925
Nagios Network Analyzer prior to version 2.4.3 contains a SQL injection vulnerability in the o[col] parameter of api/checks/read/. The issue is due to improper input handling that allows arbitrary SQL execution, potentially enabling an attacker to read and modify database data. Multiple sources c...
CVE-2021-28925: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the ocol parameter to api/checks/read/...
CVE-2021-28924: Improper Neutralization of Input During Web Page Generation
Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page...
PT-2021-17986
Name of the Vulnerable Software and Affected Versions: Nagios Network Analyzer versions prior to 2.4.2 Description: The issue concerns a Self Authenticated XSS in the nagiosna/groups/queries page. Recommendations: For versions prior to 2.4.2, update to version 2.4.2 or later to resolve the issue...
PT-2021-17987
Name of the Vulnerable Software and Affected Versions: Nagios Network Analyzer versions prior to 2.4.3 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the ocol parameter to the "api/checks/read/" endpoint. Recommendations: For versions prior to 2.4.3,...
Nagios 跨站脚本漏洞
Nagios Network Analyzer is a network data flow analyzer that provides a view of all network traffic and bandwidth utilization. A Self-XSS vulnerability exists in Nagios Network Analyzer versions prior to 2.4.2. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via...
Nagios SQL注入漏洞
Nagios Network Analyzer is a network data flow analyzer that provides a view of all network traffic and bandwidth utilization. A SQL injection vulnerability exists in Nagios Network Analyzer versions prior to 2.4.3. The vulnerability can be exploited to read sensitive data from the database and...
DivvyCloud Adds Support for IAM Analyzer Policy Recommendations
Last week, Amazon Web Services AWS announced an improvement to its IAM Access Analyzer that allows its users to proactively analyze and validate Identity & Access Management IAM policies against more than 100 checks and receive actionable recommendations on improving its security and efficacy. By...
Security Bulletin: Rational Asset Analyzer is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2020-10693)
Summary Rational Asset Analyzer team has addressed the following vulnerability: CVE-2020-10693. Vulnerability Details CVEID: CVE-2020-10693 DESCRIPTION: Hibernate Hibernate Validator could allow a remote attacker to bypass security restrictions, caused by a flaw in the message interpolation...
Security Bulletin: Vulnerabilities in IBM Java affecting IBM Rational asset analyzer.
Summary Multiple vulnerabilities are identified in IBM® SDK Java™ Technology Edition Version 1.8 that is used by IBM Rational Asset Analyzer. These issues were disclosed as part of the IBM Java SDK updates in July 2020. Vulnerability Details CVEID: CVE-2020-14579 DESCRIPTION: An unspecified...
Security Bulletin: Rational Asset Analyzer is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2020-4590)
Summary Rational Asset Analyzer team has addressed the following vulnerability: CVE-2020-4590. Vulnerability Details CVEID: CVE-2020-4590 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a...
Security Bulletin: Rational Asset Analyzer is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2020-4643)
Summary Rational Asset Analyzer team has addressed the following vulnerability: CVE-2020-10693. Vulnerability Details CVEID: CVE-2020-4643 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A...
The vulnerability of the Wireshark network traffic analyzer and CMS device allows a hacker to cause a service failure.
The vulnerability of the Wireshark network traffic analyzer’s CMS is related to the lack of initialization of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...