228 matches found
CVE-2019-13485
In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c...
CVE-2019-13452
In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c...
UBUNTU-CVE-2019-13274
In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter...
UBUNTU-CVE-2019-13452
In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c...
UBUNTU-CVE-2019-13484
In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c...
UBUNTU-CVE-2019-13273
In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb parameter...
UBUNTU-CVE-2019-13455
In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c...
UBUNTU-CVE-2019-13451
In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c...
CVE-2019-13273
CVE-2019-13273 affects Xymon up to version 4.3.28, where the csvinfo CGI script contains a buffer overflow caused by a crafted GET request that triggers an sprintf on the srcdb parameter. This is a server-side vulnerability in the web interface (csvinfo.c) that can lead to memory corruption. The ...
CVE-2019-13273
In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb parameter...
CVE-2019-13273
In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb parameter...
CVE-2019-13274
In CVE-2019-13274, the affected software is Xymon up to version 4.3.28, where the csvinfo CGI script is vulnerable due to insufficient filtering of the db parameter, enabling a cross-site scripting (XSS) issue. The connected sources consistently describe the vulnerability and its presence in Xymo...
CVE-2019-13274
In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter...
CVE-2019-13274
In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter...
CVE-2019-13451
In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c...
CVE-2019-13451
CVE-2019-13451 affects Xymon up to version 4.3.28, with a buffer overflow in history.c identified as the root cause. The issue is documented across multiple feeds (NVD, CNVD, OSV, osv.dev, Debian/Ubuntu trackers) and is characterized by exposure via a network vector with high impact on confidenti...
CVE-2019-13451
In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c...
CVE-2019-13452
In Xymon (through version 4.3.28), a buffer overflow vulnerability is reported in the reportlog.c component (CVE-2019-13452). The issue stems from a buffer overflow in reportlog.c, with CVSS data indicating high/critical severity across both CVSS2 and CVSS3 metrics. The provided documents do not ...