Nagios

Nagios

37 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2008-4796

  • EPSS 1.09%
  • Veröffentlicht 30.10.2008 20:56:54
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitra...

4.3

CVE-2007-5803

Exploit
  • EPSS 0.48%
  • Veröffentlicht 13.05.2008 23:20:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360.

4.3

CVE-2008-1360

  • EPSS 0.3%
  • Veröffentlicht 17.03.2008 17:44:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in Nagios before 2.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts, a different issue than CVE-2007-5624.

4.3

CVE-2007-5624

  • EPSS 0.3%
  • Veröffentlicht 23.10.2007 16:46:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in Nagios 2.x before 2.10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts.

7.5

CVE-2006-2489

  • EPSS 1.92%
  • Veröffentlicht 19.05.2006 23:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header. NOTE: this is a diffe...

5

CVE-2006-2162

  • EPSS 1.32%
  • Veröffentlicht 03.05.2006 21:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.

10

CVE-2002-1959

  • EPSS 0.99%
  • Veröffentlicht 31.12.2002 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output.