NA
Product
Nagios
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 6Low 0
Watch
Add Nagios to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6584 | 6.5 | Mar 16 | Nagios Log Server 2.1.3 has Incorrect Access Control Affected: 2.1.3 |
| CVE-2017-12847 | 6.3 | Aug 23 | Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging… Affected: through 4.3.2 |
| CVE-2016-6209 | 6.1 | Mar 31 | Cross-site scripting (XSS) vulnerability in Nagios Affected: All versions, or not specified |
| CVE-2018-13441 | 5.5 | Jul 12 | qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by… Affected: through 4.4.1 |
| CVE-2020-6586 | 5.4 | Mar 16 | Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page Affected: 2.1.3 |
| CVE-2020-13977 | 4.9 | Jun 9 | Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via… Affected: 4.4.5 |
Showing 6