Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
op5 monitor vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2012-0261
license.php in system-portal prior to 1.6.2 in op5 Monitor and op5 Appliance prior to 5.5.3 allows remote malicious users to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.
Op5 Monitor 5.3.5
Op5 System-portal
Op5 Monitor 5.5.0
Op5 Monitor 5.4.0
Op5 Monitor
Op5 Monitor 5.4.2
1 EDB exploit
10
CVSSv2
CVE-2012-0264
op5 Monitor and op5 Appliance prior to 5.5.0 do not properly manage session cookies, which allows remote malicious users to have an unspecified impact via unspecified vectors.
Op5 Monitor 5.3.5
Op5 Monitor
Op5 Monitor 5.4.0
10
CVSSv2
CVE-2012-0262
op5config/welcome in system-op5config prior to 2.0.3 in op5 Monitor and op5 Appliance prior to 5.5.3 allows remote malicious users to execute arbitrary commands via shell metacharacters in the password parameter.
Op5 System-op5config
Op5 Monitor
Op5 Monitor 5.4.2
Op5 Monitor 5.5.0
Op5 Monitor 5.4.0
Op5 Monitor 5.3.5
1 EDB exploit
6.8
CVSSv2
CVE-2008-5028
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor prior to 4.0.1 allows remote malicious users to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests.
Nagios Nagios 3.0
Nagios Nagios 2.0b5
Nagios Nagios 2.7
Nagios Nagios 2.4
Op5 Monitor
Nagios Nagios 2.0b6
Nagios Nagios 1.0b3
Nagios Nagios 1.1
Nagios Nagios 2.1
Op5 Monitor 3.3.1
Nagios Nagios 1.0b6
Nagios Nagios 3.0.1
Nagios Nagios 1.0
Nagios Nagios 2.3.1
Nagios Nagios 2.2
Op5 Monitor 3.2
Nagios Nagios 2.0b2
Op5 Monitor 2.8
Op5 Monitor 3.2.4
Nagios Nagios 1.0b4
Nagios Nagios 3.0.2
Nagios Nagios 2.5
6.5
CVSSv2
CVE-2008-5027
The Nagios process in (1) Nagios prior to 3.0.5 and (2) op5 Monitor prior to 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon.
Nagios Nagios 1.0b4
Nagios Nagios 1.0b3
Nagios Nagios 1.4
Nagios Nagios 1.3
Nagios Nagios 2.0b4
Nagios Nagios 2.0rc2
Nagios Nagios 2.5
Nagios Nagios 2.7
Nagios Nagios 3.0
Op5 Monitor 3.3.2
Op5 Monitor 3.3.1
Op5 Monitor 2.8
Nagios Nagios 1.0 B3
Nagios Nagios 1.0b1
Nagios Nagios 1.0b2
Nagios Nagios 1.4.1
Nagios Nagios 1.2
Nagios Nagios 1.1
Nagios Nagios 1.0b6
Nagios Nagios 2.0rc1
Nagios Nagios 2.3
Nagios Nagios 2.8
5
CVSSv2
CVE-2013-6141
Unspecified vulnerability in op5 Monitor prior to 6.1.3 allows malicious users to read arbitrary files via unknown vectors related to lack of authorization.
Op5 Monitor 5.5.3.1
Op5 Monitor 5.6.0
Op5 Monitor 5.6.1
Op5 Monitor 5.7.0
Op5 Monitor 5.8.0
Op5 Monitor 6.1.0
Op5 Monitor 6.1.1
Op5 Monitor 6.1.2
Op5 Monitor
Op5 Monitor 5.7.1
Op5 Monitor 5.7.3.1
Op5 Monitor 6.0.6
Op5 Monitor 5.3.5
Op5 Monitor 5.4.2
Op5 Monitor 5.7.3.3
Op5 Monitor 6.0.0
Op5 Monitor 6.0.3
Op5 Monitor 6.0.4
Op5 Monitor 5.5.0
Op5 Monitor 5.5.1
Op5 Monitor 5.5.3
Op5 Monitor 5.7.3
4.3
CVSSv2
CVE-2014-4907
Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios prior to 0.6.22 allows remote malicious users to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message.
Op5 Monitor 6.3.0
Pnp4nagios Pnp4nagios 0.6.1
Pnp4nagios Pnp4nagios 0.6.10
Pnp4nagios Pnp4nagios 0.6.17
Pnp4nagios Pnp4nagios 0.6.18
Pnp4nagios Pnp4nagios 0.6.19
Pnp4nagios Pnp4nagios 0.6.0
Pnp4nagios Pnp4nagios 0.6.15
Pnp4nagios Pnp4nagios 0.6.16
Pnp4nagios Pnp4nagios 0.6.7
Pnp4nagios Pnp4nagios 0.6.11
Pnp4nagios Pnp4nagios 0.6.12
Pnp4nagios Pnp4nagios 0.6.2
Pnp4nagios Pnp4nagios 0.6.3
Pnp4nagios Pnp4nagios 0.6.4
Pnp4nagios Pnp4nagios
Pnp4nagios Pnp4nagios 0.6.20
Pnp4nagios Pnp4nagios 0.6.13
Pnp4nagios Pnp4nagios 0.6.14
Pnp4nagios Pnp4nagios 0.6.5
Pnp4nagios Pnp4nagios 0.6.6
4
CVSSv2
CVE-2012-0263
monitor/index.php in op5 Monitor and op5 Appliance prior to 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2...
Op5 Monitor 5.3.5
Op5 Monitor 5.4.0
Op5 Monitor
Op5 Monitor 5.4.2
NA
CVE-2021-40272
OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).
Op5 Monitor
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2024-5274
CVE-2020-17519
CVE-2024-35340
CVE-2021-47558
local
XML injection
CVE-2021-47519
CVE-2021-47543
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started