icinga icinga 1.0.2 vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga prior to 1.4.1, when escape_html_tags is disabled, allow remote malicious users to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a...

Icinga Icinga Icinga Icinga 0.8.0 Icinga Icinga 0.8.1 Icinga Icinga 0.8.2 Icinga Icinga 0.8.3 Icinga Icinga 0.8.4 Icinga Icinga 1.0 Icinga Icinga 1.0.1 Icinga Icinga 1.0.2 Icinga Icinga 1.0.3 Icinga Icinga 1.2.0 Icinga Icinga 1.2.1

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga prior to 1.4.1 allow remote malicious users to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts ac...

Icinga Icinga Icinga Icinga 0.8.0 Icinga Icinga 0.8.1 Icinga Icinga 0.8.2 Icinga Icinga 0.8.3 Icinga Icinga 0.8.4 Icinga Icinga 1.0 Icinga Icinga 1.0.1 Icinga Icinga 1.0.2 Icinga Icinga 1.0.3 Icinga Icinga 1.2.0 Icinga Icinga 1.2.1

1 EDB exploit

Multiple stack-based buffer overflows in Icinga prior to 1.8.5, 1.9 prior to 1.9.4, and 1.10 prior to 1.10.2 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the (1) display_nav_table, (2) page_limit_se...

Icinga Icinga Icinga Icinga 0.8.0 Icinga Icinga 0.8.1 Icinga Icinga 0.8.2 Icinga Icinga 0.8.3 Icinga Icinga 0.8.4 Icinga Icinga 1.0 Icinga Icinga 1.0.1 Icinga Icinga 1.0.2 Icinga Icinga 1.0.3 Icinga Icinga 1.2.0 Icinga Icinga 1.2.1

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and previous versions allows remote malicious users to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requi...

Icinga Icinga Icinga Icinga 0.8.0 Icinga Icinga 0.8.1 Icinga Icinga 0.8.2 Icinga Icinga 0.8.3 Icinga Icinga 0.8.4 Icinga Icinga 1.0 Icinga Icinga 1.0.1 Icinga Icinga 1.0.2 Icinga Icinga 1.0.3 Icinga Icinga 1.2.0 Icinga Icinga 1.2.1

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and previous versions, and Icinga prior to 1.8.5, 1.9 prior to 1.9.4, and 1.10 prior to 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a l...

Nagios Nagios Nagios Nagios 3.0 Nagios Nagios 3.0.1 Nagios Nagios 3.0.2 Nagios Nagios 3.0.3 Nagios Nagios 3.0.4 Nagios Nagios 3.0.5 Nagios Nagios 3.0.6 Nagios Nagios 3.1.0 Nagios Nagios 3.1.1 Nagios Nagios 3.1.2 Nagios Nagios 3.2.0

1 EDB exploit

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core prior to 3.4.4, and Icinga 1.6.x prior to 1.6.2, 1.7.x prior to 1.7.4, and 1.8.x prior to 1.8.4, might allow remote malicious users to execute arbitrary code via a long (1) host_name v...

Nagios Nagios Nagios Nagios 3.0 Nagios Nagios 3.0.1 Nagios Nagios 3.0.2 Nagios Nagios 3.0.3 Nagios Nagios 3.0.4 Nagios Nagios 3.0.5 Nagios Nagios 3.0.6 Nagios Nagios 3.1.0 Nagios Nagios 3.1.1 Nagios Nagios 3.1.2 Nagios Nagios 3.2.0

2 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook