Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
centreon centreon web vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2019-17105
The token generator in index.php in Centreon Web prior to 2.8.27 is predictable.
Centreon Centreon Web
4
CVSSv2
CVE-2019-17106
In Centreon Web up to and including 2.8.29, disclosure of external components' passwords allows authenticated malicious users to move laterally to external components.
Centreon Centreon Web
4.3
CVSSv2
CVE-2019-17108
Local file inclusion in brokerPerformance.php in Centreon Web prior to 2.8.28 allows malicious users to disclose information or perform a stored XSS attack on a user.
Centreon Centreon Web
6.5
CVSSv2
CVE-2019-15299
An issue exists in Centreon Web up to and including 19.04.3. When a user changes his password on his profile page, the contact_autologin_key field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication.
Centreon Centreon Web
6.5
CVSSv2
CVE-2019-17107
minPlayCommand.php in Centreon Web prior to 2.8.27 allows authenticated malicious users to execute arbitrary code via the command_hostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect.
Centreon Centreon Web
6.5
CVSSv2
CVE-2018-21022
makeXML_ListServices.php in Centreon Web prior to 2.8.28 allows malicious users to perform SQL injections via the host_id parameter.
Centreon Centreon Web
7.2
CVSSv2
CVE-2019-16406
Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF (aka VirtualBox virtual machine) files, allowing malicious users to gain privileges via a Trojan horse Centreon-autodisco executable file that is launched by cron.
Centreon Centreon Web 19.04.4
1 Github repository
4.3
CVSSv2
CVE-2008-1179
Multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color_picker.php in Centreon 1.4.2.3 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) name and (2) title parameters. NOTE: some of these details a...
Centreon Centreon
Centreon Centreon 1.4.2
Centreon Centreon 1.4.1
Centreon Centreon 1.4.2.2
Centreon Centreon 1.4.2.1
Centreon Centreon 1.4
7.5
CVSSv2
CVE-2018-21024
licenseUpload.php in Centreon Web prior to 2.8.27 allows malicious users to upload arbitrary files via a POST request.
Centreon Centreon
6.5
CVSSv2
CVE-2018-19271
Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.28) allows SQL Injection via the main.php searchH parameter.
Centreon Centreon 3.4.6
Centreon Centreon 3.4.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761
command injection
CVE-2024-3676
IDOR
CVE-2024-30039
CVE-2024-32113
CVE-2024-30049
CVE-2024-4776
SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »