Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nagios nagios core vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2018-13457
qh_echo in Nagios Core 4.4.1 and previous versions is prone to a NULL pointer dereference vulnerability, which allows malicious users to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
Nagios Nagios Core
5.5
CVSSv3
CVE-2018-13458
qh_core in Nagios Core 4.4.1 and previous versions is prone to a NULL pointer dereference vulnerability, which allows malicious users to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
Nagios Nagios Core
7.8
CVSSv3
CVE-2017-14312
Nagios Core up to and including 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this file is owned by a non-root account (and similarly can have nagios.cfg owned by a non-root account), which allows local users to gain privileges by l...
Nagios Nagios Core
8.8
CVSSv3
CVE-2020-35269
Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, like adding – deleting for hosts or servers.
Nagios Nagios Core 4.2.4
5.4
CVSSv3
CVE-2018-18245
Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE.
Nagios Nagios Core 4.4.2Debian Debian Linux 8.0
NA
CVE-2013-7205
Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and previous versions allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key ...
Nagios Nagios 3.0Nagios Nagios 3.0.3Nagios Nagios 3.0.4Nagios Nagios 3.2.2Nagios Nagios 3.2.3Nagios Nagios 3.0.5Nagios Nagios 3.0.6Nagios Nagios 3.3.1Nagios Nagios 3.4.0Nagios NagiosNagios Nagios 3.0.1Nagios Nagios 3.0.2Nagios Nagios 3.2.0Nagios Nagios 3.2.1Nagios Nagios 3.4.3Nagios Nagios 3.5.1Nagios Nagios 3.1.0Nagios Nagios 3.1.1Nagios Nagios 3.1.2Nagios Nagios 3.4.1Nagios Nagios 3.4.2
NA
CVE-2013-6875
SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI prior to 2012R2.4 allows remote malicious users to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php.
Nagios Nagios Xi 2012r2.1Nagios Nagios Xi 2012r1.9Nagios Nagios Xi 2012r1.2Nagios Nagios Xi 2012r1.0Nagios Nagios XiNagios Nagios Xi 2012r2.2Nagios Nagios Xi 2012Nagios Nagios Xi 2012r1.7Nagios Nagios Xi 2012r1.6Nagios Nagios Xi 2012r1.5Nagios Nagios Xi 2012r1.4Nagios Nagios Xi 2012r2.0Nagios Nagios Xi 2012r1.8Nagios Nagios Xi 2012r1.3Nagios Nagios Xi 2012r1.1
NA
CVE-2012-6096
Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core prior to 3.4.4, and Icinga 1.6.x prior to 1.6.2, 1.7.x prior to 1.7.4, and 1.8.x prior to 1.8.4, might allow remote malicious users to execute arbitrary code via a long (1) host_name v...
Nagios Nagios 3.2.3Nagios Nagios 3.2.2Nagios Nagios 3.0.5Nagios Nagios 3.0.4Nagios Nagios 3.4.0Nagios Nagios 3.0Nagios Nagios 3.3.1Nagios Nagios 3.1.0Nagios Nagios 3.0.6Nagios Nagios 3.4.2Nagios Nagios 3.4.1Nagios Nagios 3.1.2Nagios Nagios 3.1.1Nagios Nagios 3.0.1Nagios NagiosNagios Nagios 3.2.1Nagios Nagios 3.2.0Nagios Nagios 3.0.3Nagios Nagios 3.0.2Icinga Icinga 1.7.2Icinga Icinga 1.7.1Icinga Icinga 1.6.0
5.5
CVSSv3
CVE-2018-13441
qh_help in Nagios Core version 4.4.1 and previous versions is prone to a NULL pointer dereference vulnerability, which allows malicious user to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
Nagios Nagios
NA
CVE-2013-7108
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and previous versions, and Icinga prior to 1.8.5, 1.9 prior to 1.9.4, and 1.10 prior to 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a l...
Nagios Nagios 3.0Nagios Nagios 3.0.3Nagios Nagios 3.0.4Nagios Nagios 3.2.1Nagios Nagios 3.2.2Nagios Nagios 3.2.3Nagios NagiosNagios Nagios 3.0.1Nagios Nagios 3.0.2Nagios Nagios 3.1.2Nagios Nagios 3.2.0Nagios Nagios 3.4.3Nagios Nagios 3.5.1Nagios Nagios 3.1.0Nagios Nagios 3.1.1Nagios Nagios 3.4.1Nagios Nagios 3.4.2Nagios Nagios 3.0.5Nagios Nagios 3.0.6Nagios Nagios 3.3.1Nagios Nagios 3.4.0Icinga Icinga 1.9.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook