Connexion Inscription
JA · EN · FR
SecPulse

Nagios

🏢 Vendors Liées 63
slug: nagios

Pas encore d'explication pour cette étiquette.

🔖 Étiquettes liées

Microsoft8430 Linux7898 PHP5978 WordPress5473 Google4741 Oracle4038 Apple3267 Android1835 Ibm1678 Apache1534 Adobe1461 Java1447 Cisco1091 Mozilla712 Dell454

🛡 Vulnérabilités associées 110

Image ID Titre
CVE-2024-14001 XSS (Cross-Site Scripting) dans Nagios Xi (CVE-2024-14001)
CVE-2024-14002 Vulnérabilité dans Nagios Xi (CVE-2024-14002)
CVE-2024-14003 Injection de commande OS dans Nagios Xi (CVE-2024-14003)
CVE-2024-14004 Élévation de privilèges dans Nagios Xi (CVE-2024-14004)
CVE-2024-13993 XSS (Cross-Site Scripting) dans Nagios Xi (CVE-2024-13993)
CVE-2024-13994 Vulnérabilité dans Nagios Xi (CVE-2024-13994)
CVE-2024-13995 Vulnérabilité dans Nagios Xi (CVE-2024-13995)
CVE-2023-7321 Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page. Untrusted log content was not safely encoded for the output context, allowing attacker-c...
CVE-2023-7322 Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability. Users who lacked the required API permission were nevertheless able to invoke API endpoints, resulting in u...
CVE-2023-7323 Nagios Log Server versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Create User function. Insufficient validation or escaping of user-supplied input may allow an attacker t...
CVE-2023-7313 XSS (Cross-Site Scripting) dans Nagios Xi (CVE-2023-7313)
CVE-2023-7314 XSS (Cross-Site Scripting) dans Nagios Xi (CVE-2023-7314)
CVE-2023-7315 Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to in...
CVE-2023-7316 Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to in...
CVE-2023-7317 Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the terminal interface witho...
CVE-2023-7318 Nagios XI versions prior to < 2024R1.0.2 are vulnerable to cross-site scripting (XSS) via the Nagios Core Command Expansion page. Insufficient validation or escaping of user-supplied input may allow a...
CVE-2023-7319 Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow a...
CVE-2022-50586 Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the BPI component via the info URL field. Insufficient validation or escaping of user-supplied input may allow an atta...
CVE-2022-50587 Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) via the Apply Configuration error text. Insufficient validation or escaping of user-supplied input may allow an attacker...
CVE-2022-50588 Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting (XSS) in the update checking feature. Insufficient validation or escaping of user-supplied input may allow an attacker to injec...
CVE-2023-53688 Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting (XSS) and cross-site request forgery (CSRF) via the Hypermap Replay component. An attacker can submit crafted input that is no...
CVE-2023-53689 Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in t...
CVE-2023-53690 Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configuration. Unsanitized user input can be stored and later rende...
CVE-2023-7312 Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in th...
CVE-2020-36862 Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Crafted export requests could (1) inject script into exported/returned content due to...
CVE-2020-36863 Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that location. The upload handler did not properly restrict file types or enforce stora...
CVE-2020-36864 Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the background color settings in Dashboards. Insufficient validation or escaping of user-supplied input may allow an...
CVE-2020-36865 Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the BPI (Business Process Intelligence) component’s Config Management and Edit Config page. Insufficient validation o...
CVE-2020-36866 Nagios XI versions prior to 5.7.3 are vulnerable to cross-site scripting (XSS) via the Manage Users page of the Admin interface. Insufficient validation or escaping of user-supplied input may allow an...
CVE-2020-36867 Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export functionality. User-supplied values used in the PDF generation pipeline or the wrapper tha...

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus