1919 matches found
Nagios XI < 5.11.3 Multiple Vulnerabilities
According to the self-reported version of Nagios XI, the remote host is affected by multiple vulnerabilities, including the following: - A SQL injection vulnerability in the bulk modification tool allowing an unauthenticated remote attacker to run arbitrary code in the context of the database...
The vulnerability of the Custom Includes module in the Nagios XI monitoring tool allows a hacker to execute arbitrary code and gain unauthorized access to protected information.
The vulnerability of the Custom Includes module in Nagios XI is related to the unlimited loading of files of a dangerous type. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to protected information...
The vulnerability in the config.inc.php script of the Nagios XI monitoring tool allows a hacker to gain unauthorized access to protected information.
The vulnerability of the config.inc.php script used in Nagios XI monitoring involves unencrypted storage of user credentials. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Nagios XI monitoring tool lies in its use of strictly encrypted user data. This allows a malicious actor to gain access to read, modify, or delete data, execute arbitrary code, or trigger a service failure.
The vulnerability of the Nagios XI monitoring tool is related to the use of strictly encrypted user data. Exploiting this vulnerability allows an attacker to gain access to read, modify, or delete data, execute arbitrary code, or trigger a service failure...
The vulnerability of the Nagios XI monitoring tool, related to unencrypted storage of account data, allows a hacker to manipulate the account data of external hosts by using encrypted Ansible files.
The vulnerability of Nagios XI monitoring tool is related to the unencrypted storage of credentials. Exploiting this vulnerability can allow an attacker to gain unauthorized access to credentials for external hosts from encrypted Ansible files...
The vulnerability in the graphtemplates.php script of the Nagios XI monitoring tool allows a hacker to execute arbitrary code.
The vulnerability in the graphtemplates.php script of the Nagios XI monitoring tool is related to errors in information representation by the user interface when processing the dir parameter. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, or delete data, or...
The vulnerability of the Scheduled Backups function in the Nagios XI monitoring tool allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Scheduled Backups function in the Nagios XI monitoring tool is related to synchronization errors when using a shared resource during port scanning. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the nagiosxi.xi_auditlog component in the Nagios XI monitoring tool allows a hacker to clear the audit log table.
The vulnerability of the nagiosxi.xiauditlog component of the Nagios XI monitoring tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to clear the audit log table remotely...
The vulnerability of the Nagios XI monitoring tool lies in the lack of protection for the website structure, allowing attackers to execute CSRF attacks.
The vulnerability of the Nagios XI monitoring tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute a CSRF attack remotely...
The vulnerability in the send_to_nls.php script of the Nagios XI monitoring tool allows a hacker to disclose protected information and increase their privileges.
The vulnerability of the sendtonls.php script in the Nagios XI monitoring tool is related to improper processing of output data for registration logs. Exploiting this vulnerability can allow attackers to disclose sensitive information and enhance their privileges...
The vulnerability of the Inbound/Outbound Transfer function in the Nagios XI monitoring tool allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Inbound/Outbound Transfer function in Nagios XI relates to the unencrypted storage of critical information in the xioptions database table. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Bulk Modification Tool component in Nagios XI allows a hacker to execute arbitrary SQL code.
The vulnerability of the Bulk Modification Tool component in Nagios XI is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the command_test.php script of the Core Config Manager component of the Nagios XI monitoring tool allows a hacker to execute arbitrary code.
The vulnerability of the commandtest.php script of the Core Config Manager component of the Nagios XI monitoring tool is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of the Nagios XI monitoring tool lies in the lack of protection for the website structure when processing input fields $ARG1$ and $ARG2$. This allows attackers to execute arbitrary commands.
The vulnerability of the Nagios XI monitoring tool is related to the lack of measures taken to protect the structure of the web page during the processing of input fields $ARG1$ and $ARG2$. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Nagios XI monitoring tool arises from the lack of measures taken to neutralize special elements used in the operating system command. This allows a perpetrator to execute arbitrary code with root privileges.
The vulnerability of the Nagios XI monitoring tool exists because measures are not taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges by sending a...
CVE-2023-48085
Nagios XI before version 5.11.3 was discovered to contain a remote code execution RCE vulnerability via the component commandtest.php...
CVE-2023-48085
Nagios XI before version 5.11.3 was discovered to contain a remote code execution RCE vulnerability via the component commandtest.php...
CVE-2023-48084
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool...
