Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zenoss vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2014-3738
Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote malicious users to inject arbitrary web script or HTML via the title of a device.
Zenoss Zenoss 4.2.5
1 EDB exploit
5.8
CVSSv2
CVE-2014-3739
Open redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the came_from parameter.
Zenoss Zenoss 4.2.5
7.2
CVSSv2
CVE-2019-14257
pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropped, aka ZEN-31765.
Zenoss Zenoss 2.5.3
5
CVSSv2
CVE-2019-14258
The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.
Zenoss Zenoss 2.5.3
5
CVSSv2
CVE-2014-6262
Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core prior to 4.2.5 and other products, allow remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted third argument to the rrdtool.gr...
Zenoss Zenoss Core
Debian Debian Linux 8.0
NA
CVE-2018-25063
A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cros...
Zenoss Dashboard
5
CVSSv2
CVE-2013-2131
Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent malicious users to cause a denial of service (crash) via format string specifiers to the rrdtool.graph function.
Rrdtool Project Rrdtool 1.4.7
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700
CVE-2022-48689
CVE-2024-27956
CVE-2023-6363
SQL
NULL pointer dereference
CVE-2023-41830
CVE-2015-2051
arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3