Lucene search
+L

1482 matches found

CNNVD
CNNVD
added 2023/11/24 12:0 a.m.6 views

Checkmk Security Vulnerabilities

Checkmk is an editor. Checkmk has a security vulnerability that stems from the presence of a cross-site request forgery CSRF vulnerability that allows an authenticated attacker to delete a single user's user messages...

3.5CVSS6.7AI score0.00232EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/22 5:15 p.m.26 views

CVE-2023-6157

Improper neutralization of livestatus command delimiters in ajaxsearch in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

8.8CVSS0.0088EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/22 5:15 p.m.21 views

CVE-2023-6156

Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

8.8CVSS0.00857EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/11/22 5:15 p.m.41 views

CVE-2023-6157

Improper neutralization of livestatus command delimiters in ajaxsearch in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

8.8CVSS7.5AI score0.0088EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/22 5:15 p.m.25 views

Input validation

Improper neutralization of livestatus command delimiters in ajaxsearch in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

6.5CVSS7.5AI score0.0088EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/11/22 5:15 p.m.44 views

CVE-2023-6156

Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

8.8CVSS7.5AI score0.00857EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/22 5:15 p.m.25 views

Input validation

Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

6.5CVSS7.5AI score0.00857EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/11/22 5:15 p.m.37 views

UBUNTU-CVE-2023-6156

Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

8.8CVSS6.1AI score0.00857EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/22 5:15 p.m.45 views

UBUNTU-CVE-2023-6157

Improper neutralization of livestatus command delimiters in ajaxsearch in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

8.8CVSS6AI score0.0088EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/22 4:24 p.m.16 views

CVE-2023-6157 Livestatus injection in ajax_search

Improper neutralization of livestatus command delimiters in ajaxsearch in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

7.6CVSS7.4AI score0.0088EPSS
SaveExploits0References3
CVE
CVE
added 2023/11/22 4:24 p.m.73 views

CVE-2023-6157

CVE-2023-6157 affects Checkmk and is due to improper neutralization of livestatus command delimiters in the ajax_search function. Affected versions include Checkmk <= 2.0.0p39, < 2.1.0p37, and

8.8CVSS8.3AI score0.0088EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/22 4:24 p.m.54 views

CVE-2023-6156

CVE-2023-6156 affects Checkmk, where the vulnerability stems from improper neutralization of the livestatus command delimiters in the availability timeline. It enables arbitrary livestatus command execution for authorized users due to flawed input handling in affected builds. Affected versions in...

8.8CVSS8.3AI score0.00857EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/22 4:24 p.m.33 views

CVE-2023-6156 Livestatus injection in availability timeline

Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

7.6CVSS9.1AI score0.00857EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/22 4:24 p.m.21 views

CVE-2023-6156 Livestatus injection in availability timeline

Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

7.6CVSS7.4AI score0.00857EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.10 views

Checkmk Security Vulnerabilities

Checkmk is an editor. Checkmk has a security vulnerability that originates from incorrectly neutralizing the livestatus command separator in ajaxsearch. An attacker can exploit this vulnerability to execute arbitrary livestatus commands...

8.8CVSS7.5AI score0.0088EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.12 views

PT-2023-32549 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.0.0p39 Checkmk versions prior to 2.1.0p37 Checkmk versions prior to 2.2.0p15 Description: The issue is related to the improper neutralization of livestatus command delimiters in the ajax search function, allowing...

8.8CVSS7.6AI score0.0088EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.11 views

Checkmk Security Vulnerabilities

Checkmk is an editor. Checkmk suffers from a security vulnerability that stems from incorrect neutralization of the livestatus command separator. An attacker can exploit this vulnerability to execute arbitrary livestatus commands...

8.8CVSS7.5AI score0.00857EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/11/17 12:0 a.m.16 views

Checkmk 2.0.x < 2.1.0p37, 2.2.x < 2.2.0p15 Multiple Vulnerabilities

Checkmk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if description...

8.8CVSS6.3AI score0.0088EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/15 11:15 a.m.20 views

CVE-2023-23549

Improper Input Validation in Checkmk 2.2.0p15, 2.1.0p37, =2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames...

2.7CVSS0.00643EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/11/15 11:15 a.m.31 views

CVE-2023-23549

Improper Input Validation in Checkmk 2.2.0p15, 2.1.0p37, =2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames...

2.7CVSS5.9AI score0.00643EPSS
SaveExploits0References2
Rows per page
Query Builder