Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM command_test.php script.Check if you run itEPSS 2.45%Oct 30, 2025
- High7.1Nagios XI versions prior to 2024R1.1.4 contain a local file inclusion (LFI) vulnerability via its NagVis integration.Check if you run itEPSS 1.68%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin.Check if you run itEPSS 4.03%Oct 30, 2025
- High7.1Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose sensitive user account information (including API keys and hashed passwords) to authenticCheck if you run itEPSS 1.30%Oct 30, 2025
- High7.1Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes.Check if you run itEPSS 1.04%Oct 30, 2025
- High8.7Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins' option is enabled.Check if you run itEPSS 0.92%Oct 30, 2025
- High7.3Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication token to an authenticated user.Check if you run itEPSS 1.88%Oct 30, 2025
- Medium5.1Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Percentile Calculator menu.Check if you run itEPSS 0.51%Oct 30, 2025
- Medium5.1Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting (XSS) vulnerability in the Source Groups page (percentile calculator menu).Check if you run itEPSS 0.76%Oct 30, 2025
- High8.6Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management functionality whereby the certificate removal operation fails to appCheck if you run itEPSS 1.43%Oct 30, 2025
- Medium5.1Nagios Log Server versions prior to 2.1.14 are vulnerable to cross-site scripting (XSS) via the Snapshots Page.Check if you run itEPSS 0.51%Oct 30, 2025
- Medium5.1Nagios Log Server versions prior to 2024R1 are vulnerable to cross-site scripting (XSS) via the Create User function.Check if you run itEPSS 0.51%Oct 30, 2025
- Medium5.1Nagios Log Server versions prior to 2.1.6 contain cross-site scripting (XSS) vulnerabilities via the web interface on the Create User, Edit User, and Manage Host Lists pages.Check if you run itEPSS 0.51%Oct 30, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2023-7323.Open the advisoryOct 30, 2025
- High8.7Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in the account email-change workflow.Check if you run itEPSS 0.70%Oct 30, 2025
- Critical9.4Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly validated before being forwarded to an inCheck if you run itEPSS 2.15%Oct 30, 2025
- Medium5.3In Nagios Log Server versions prior to 2024R2.0.3, when a user's configured default dashboard is deleted, the application does not reliably fall back to an empty, default dashboardCheck if you run itEPSS 0.86%Oct 30, 2025
- UnknownCGA-xxxv-jcx4-cr33Open the advisoryOct 30, 2025
- High7.1Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards.Check if you run itEPSS 1.03%Oct 30, 2025
- High8.5Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or theCheck if you run itEPSS 0.28%Oct 30, 2025
- Critical9.3Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user.Check if you run itEPSS 2.08%Oct 30, 2025
- High8.7Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability.Check if you run itEPSS 1.07%Oct 30, 2025
- Medium5.1Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table.Check if you run itEPSS 0.51%Oct 30, 2025
- High8.7Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from peer nodes over an unencrypted chCheck if you run itEPSS 0.74%Oct 30, 2025
- Medium6.9Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field during import.Check if you run itEPSS 0.63%Oct 30, 2025
Sort