Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.4 / Nagios XI 5.8.6 contains a reflected cross-site scripting (XSS) vulnerability via the Test Command functionCheck if you run itEPSS 0.52%Oct 30, 2025
- High8.7Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool.Check if you run itEPSS 3.38%Oct 30, 2025
- High7.2Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality.Check if you run itEPSS 0.75%Oct 30, 2025
- High8.6Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page.Check if you run itEPSS 2.27%Oct 30, 2025
- High8.7Nagios XI versions prior to 2012R1.3 contain a SQL injection vulnerability in the legacy Core Configuration Manager (CCM) interface.Check if you run itEPSS 1.12%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM command_test.php script.Check if you run itEPSS 2.45%Oct 30, 2025
- High7.1Nagios XI versions prior to 2024R1.1.4 contain a local file inclusion (LFI) vulnerability via its NagVis integration.Check if you run itEPSS 1.68%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin.Check if you run itEPSS 4.03%Oct 30, 2025
- High7.1Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose sensitive user account information (including API keys and hashed passwords) to authenticCheck if you run itEPSS 1.30%Oct 30, 2025
- High7.1Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes.Check if you run itEPSS 1.04%Oct 30, 2025
- High8.7Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins' option is enabled.Check if you run itEPSS 0.92%Oct 30, 2025
- High7.3Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication token to an authenticated user.Check if you run itEPSS 1.88%Oct 30, 2025
- Medium5.1Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Percentile Calculator menu.Check if you run itEPSS 0.51%Oct 30, 2025
- Medium5.1Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting (XSS) vulnerability in the Source Groups page (percentile calculator menu).Check if you run itEPSS 0.76%Oct 30, 2025
- High8.6Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to appCheck if you run itEPSS 1.43%Oct 30, 2025
- Medium5.1Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page.Check if you run itEPSS 0.51%Oct 30, 2025
- Medium5.1Nagios Log Server versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Create User function.Check if you run itEPSS 0.51%Oct 30, 2025
- Medium5.1Nagios Log Server versions prior to 2.1.6 contain cross-site scripting (XSS) vulnerabilities via the web interface on the Create User, Edit User, and Manage Host Lists pages.Check if you run itEPSS 0.51%Oct 30, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2023-7323.Open the advisoryOct 30, 2025
- High8.7Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in the account email-change workflow.Check if you run itEPSS 0.70%Oct 30, 2025
- Critical9.4Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly validated before being forwarded to an inCheck if you run itEPSS 2.15%Oct 30, 2025
- Medium5.3In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboardCheck if you run itEPSS 0.86%Oct 30, 2025
- High7.1Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards.Check if you run itEPSS 1.03%Oct 30, 2025
- High8.5Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or theCheck if you run itEPSS 0.28%Oct 30, 2025
- Critical9.3Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user.Check if you run itEPSS 2.08%Oct 30, 2025
Sort