Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

icinga icinga vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2013-7107

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and previous versions allows remote malicious users to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requi...
Icinga Icinga 1.8.5Icinga Icinga 0.8.1Icinga Icinga 0.8.4Icinga Icinga 1.9.2Icinga Icinga 1.8.4Icinga Icinga 1.0.2Icinga Icinga 1.9.3Icinga Icinga 1.2.1Icinga Icinga 0.8.3Icinga Icinga 1.9.0Icinga Icinga 1.6.1Icinga Icinga 1.7.0Icinga Icinga 0.8.0Icinga Icinga 1.3.0Icinga Icinga 1.7.4Icinga Icinga 1.8.2Icinga Icinga 1.8.0Icinga Icinga 0.8.2Icinga Icinga 1.7.2Icinga Icinga 1.0.3Icinga Icinga 1.3.1Icinga Icinga 1.4.0
NA

CVE-2013-7106

Multiple stack-based buffer overflows in Icinga prior to 1.8.5, 1.9 prior to 1.9.4, and 1.10 prior to 1.10.2 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the (1) display_nav_table, (2) page_limit_se...
Icinga Icinga 0.8.1Icinga Icinga 0.8.4Icinga Icinga 1.9.2Icinga Icinga 1.0.2Icinga Icinga 1.9.3Icinga Icinga 1.2.1Icinga Icinga 0.8.3Icinga Icinga 1.9.0Icinga Icinga 1.6.1Icinga Icinga 1.7.0Icinga Icinga 0.8.0Icinga Icinga 1.3.0Icinga Icinga 1.7.4Icinga Icinga 1.8.2Icinga Icinga 1.8.0Icinga Icinga 0.8.2Icinga IcingaIcinga Icinga 1.7.2Icinga Icinga 1.0.3Icinga Icinga 1.3.1Icinga Icinga 1.4.0Icinga Icinga 1.7.3
NA

CVE-2011-2477

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga prior to 1.4.1, when escape_html_tags is disabled, allow remote malicious users to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a...
Icinga Icinga 0.8.1Icinga Icinga 0.8.4Icinga Icinga 1.0.2Icinga Icinga 1.2.1Icinga Icinga 0.8.3Icinga Icinga 0.8.0Icinga Icinga 1.3.0Icinga Icinga 0.8.2Icinga Icinga 1.0.3Icinga Icinga 1.3.1Icinga Icinga 1.0Icinga IcingaIcinga Icinga 1.2.0Icinga Icinga 1.0.1
NA

CVE-2011-2179

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga prior to 1.4.1 allow remote malicious users to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts ac...
Icinga Icinga 0.8.1Icinga Icinga 0.8.4Icinga Icinga 1.0.2Icinga Icinga 1.2.1Icinga Icinga 0.8.3Icinga Icinga 0.8.0Icinga Icinga 1.3.0Icinga Icinga 0.8.2Icinga Icinga 1.0.3Icinga Icinga 1.3.1Icinga Icinga 1.0Icinga IcingaNagios Nagios 3.2.3Icinga Icinga 1.2.0Icinga Icinga 1.0.1
NA

CVE-2014-1878

Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and previous versions, and Icinga prior to 1.8.6, 1.9 prior to 1.9.5, and 1.10 prior to 1.10.3 allows remote malicious users to cause a denial of service (segmentation fault) vi...
Icinga Icinga 1.9.2Icinga Icinga 1.8.4Icinga Icinga 1.9.3Nagios Nagios 4.0.0Icinga Icinga 1.9.0Icinga Icinga 1.8.2Icinga Icinga 1.8.0Nagios Nagios 4.0.2Icinga Icinga 1.8.3Icinga Icinga 1.8.1Icinga Icinga 1.10.2Icinga IcingaIcinga Icinga 1.9.4Icinga Icinga 1.9.1Nagios NagiosIcinga Icinga 1.10.1Icinga Icinga 1.10.0
NA

CVE-2013-7108

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and previous versions, and Icinga prior to 1.8.5, 1.9 prior to 1.9.4, and 1.10 prior to 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a l...
Nagios Nagios 3.0Nagios Nagios 3.1.2Nagios Nagios 3.2.2Nagios Nagios 3.2.0Nagios Nagios 3.1.1Nagios Nagios 3.0.6Nagios Nagios 3.0.1Nagios Nagios 3.4.1Nagios Nagios 3.0.2Nagios Nagios 3.1.0Nagios NagiosNagios Nagios 3.4.2Nagios Nagios 3.4.3Nagios Nagios 3.5.1Nagios Nagios 3.0.4Nagios Nagios 3.2.1Nagios Nagios 3.0.3Nagios Nagios 3.2.3Nagios Nagios 3.3.1Nagios Nagios 3.0.5Nagios Nagios 3.4.0Icinga Icinga 0.8.1
9.1
CVSSv3

CVE-2020-29663

Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.
Icinga IcingaIcinga Icinga 2.12.2
NA

CVE-2014-2386

Multiple off-by-one errors in Icinga, possibly 1.10.2 and previous versions, allow remote malicious users to cause a denial of service (crash) via unspecified vectors to the (1) display_nav_table, (2) print_export_link, (3) page_num_selector, or (4) page_limit_selector function i...
Opensuse Opensuse 12.3Icinga IcingaIcinga Icinga 1.10.1Icinga Icinga 1.10.0Opensuse Opensuse 13.1
NA

CVE-2012-6096

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core prior to 3.4.4, and Icinga 1.6.x prior to 1.6.2, 1.7.x prior to 1.7.4, and 1.8.x prior to 1.8.4, might allow remote malicious users to execute arbitrary code via a long (1) host_name v...
Nagios Nagios 3.0Nagios Nagios 3.1.2Nagios Nagios 3.2.2Nagios Nagios 3.2.0Nagios Nagios 3.1.1Nagios Nagios 3.0.6Nagios Nagios 3.0.1Nagios Nagios 3.4.1Nagios Nagios 3.0.2Nagios Nagios 3.1.0Nagios Nagios 3.4.2Nagios Nagios 3.0.4Nagios Nagios 3.2.1Nagios NagiosNagios Nagios 3.0.3Nagios Nagios 3.2.3Nagios Nagios 3.3.1Nagios Nagios 3.0.5Nagios Nagios 3.4.0Icinga Icinga 1.6.1Icinga Icinga 1.7.0Icinga Icinga 1.8.2
5.3
CVSSv3

CVE-2021-32746

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the `doc` module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator and users need explic...
Icinga Icinga
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-9553CVE-2024-47332CVE-2024-47360remote code executionCVE-2024-45409CVE-2024-45519overflowCVE-2024-47371stored XSS
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook