Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

icinga icinga vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2

CVE-2013-7107

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and previous versions allows remote malicious users to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requi...
Icinga IcingaIcinga Icinga 0.8.0Icinga Icinga 0.8.1Icinga Icinga 0.8.2Icinga Icinga 0.8.3Icinga Icinga 0.8.4Icinga Icinga 1.0Icinga Icinga 1.0.1Icinga Icinga 1.0.2Icinga Icinga 1.0.3Icinga Icinga 1.2.0Icinga Icinga 1.2.1
6.5
CVSSv2

CVE-2013-7106

Multiple stack-based buffer overflows in Icinga prior to 1.8.5, 1.9 prior to 1.9.4, and 1.10 prior to 1.10.2 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the (1) display_nav_table, (2) page_limit_se...
Icinga IcingaIcinga Icinga 0.8.0Icinga Icinga 0.8.1Icinga Icinga 0.8.2Icinga Icinga 0.8.3Icinga Icinga 0.8.4Icinga Icinga 1.0Icinga Icinga 1.0.1Icinga Icinga 1.0.2Icinga Icinga 1.0.3Icinga Icinga 1.2.0Icinga Icinga 1.2.1
2.6
CVSSv2

CVE-2011-2477

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga prior to 1.4.1, when escape_html_tags is disabled, allow remote malicious users to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a...
Icinga IcingaIcinga Icinga 0.8.0Icinga Icinga 0.8.1Icinga Icinga 0.8.2Icinga Icinga 0.8.3Icinga Icinga 0.8.4Icinga Icinga 1.0Icinga Icinga 1.0.1Icinga Icinga 1.0.2Icinga Icinga 1.0.3Icinga Icinga 1.2.0Icinga Icinga 1.2.1
4.3
CVSSv2

CVE-2011-2179

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga prior to 1.4.1 allow remote malicious users to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts ac...
Icinga IcingaIcinga Icinga 0.8.0Icinga Icinga 0.8.1Icinga Icinga 0.8.2Icinga Icinga 0.8.3Icinga Icinga 0.8.4Icinga Icinga 1.0Icinga Icinga 1.0.1Icinga Icinga 1.0.2Icinga Icinga 1.0.3Icinga Icinga 1.2.0Icinga Icinga 1.2.1
5
CVSSv2

CVE-2014-1878

Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and previous versions, and Icinga prior to 1.8.6, 1.9 prior to 1.9.5, and 1.10 prior to 1.10.3 allows remote malicious users to cause a denial of service (segmentation fault) vi...
Icinga IcingaIcinga Icinga 1.8.0Icinga Icinga 1.8.1Icinga Icinga 1.8.2Icinga Icinga 1.8.3Icinga Icinga 1.8.4Icinga Icinga 1.9.0Icinga Icinga 1.9.1Icinga Icinga 1.9.2Icinga Icinga 1.9.3Icinga Icinga 1.9.4Icinga Icinga 1.10.0
5.5
CVSSv2

CVE-2013-7108

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and previous versions, and Icinga prior to 1.8.5, 1.9 prior to 1.9.4, and 1.10 prior to 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a l...
Nagios NagiosNagios Nagios 3.0Nagios Nagios 3.0.1Nagios Nagios 3.0.2Nagios Nagios 3.0.3Nagios Nagios 3.0.4Nagios Nagios 3.0.5Nagios Nagios 3.0.6Nagios Nagios 3.1.0Nagios Nagios 3.1.1Nagios Nagios 3.1.2Nagios Nagios 3.2.0
9.1
CVSSv3

CVE-2020-29663

Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.
Icinga IcingaIcinga Icinga 2.12.2
5
CVSSv2

CVE-2014-2386

Multiple off-by-one errors in Icinga, possibly 1.10.2 and previous versions, allow remote malicious users to cause a denial of service (crash) via unspecified vectors to the (1) display_nav_table, (2) print_export_link, (3) page_num_selector, or (4) page_limit_selector function i...
Icinga IcingaIcinga Icinga 1.10.0Icinga Icinga 1.10.1Opensuse Opensuse 12.3Opensuse Opensuse 13.1
7.5
CVSSv2

CVE-2012-6096

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core prior to 3.4.4, and Icinga 1.6.x prior to 1.6.2, 1.7.x prior to 1.7.4, and 1.8.x prior to 1.8.4, might allow remote malicious users to execute arbitrary code via a long (1) host_name v...
Nagios NagiosNagios Nagios 3.0Nagios Nagios 3.0.1Nagios Nagios 3.0.2Nagios Nagios 3.0.3Nagios Nagios 3.0.4Nagios Nagios 3.0.5Nagios Nagios 3.0.6Nagios Nagios 3.1.0Nagios Nagios 3.1.1Nagios Nagios 3.1.2Nagios Nagios 3.2.0
8.3
CVSSv3

CVE-2024-24820

Icinga Director is a tool designed to make Icinga 2 configuration handling easy. Not any of Icinga Director's configuration forms used to manipulate the monitoring environment are protected against cross site request forgery (CSRF). It enables malicious users to perform chan...
Icinga Icinga
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-0557injectionadifier systemdenial of serviceunauthorizedCVE-2024-55591CVE-2025-0282CVE-2024-49354CVE-2025-21651CVE-2025-21644ultimate member – user profile, registration, login, member directory, content restriction & membership plugineteuberttduck-platform
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook