Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to NagVis configuration handling (nagvis.conf).Check if you run itEPSS 1.11%Oct 30, 2025
- High8.5Nagios XI versions prior to 5.5.7 contain a privilege escalation vulnerability in the MRTG graphing component.Check if you run itEPSS 0.35%Oct 30, 2025
- High8.5Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script.Check if you run itEPSS 0.34%Oct 30, 2025
- High8.4Nagios XI versions prior to 2024R2 contain an improperly owned script, process_perfdata.pl, which is executed periodically as the nagios user but owned by www-data.Check if you run itEPSS 0.29%Oct 30, 2025
- High8.8Nagios XI versions prior to 2024R1.2.2 contain a host header injection vulnerability.Check if you run itEPSS 0.47%Oct 30, 2025
- High8.7Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component Download page.Check if you run itEPSS 1.68%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard.Check if you run itEPSS 4.03%Oct 30, 2025
- High8.7Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export functionality.Check if you run itEPSS 2.55%Oct 30, 2025
- Medium5.1The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.0 / Nagios XI 5.8.0 contais a cross-site scripting (XSS) vulnerability in the Templates pages, specifically inCheck if you run itEPSS 0.44%Oct 30, 2025
- Medium5.1The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.1 / Nagios XI 5.8.2 contains multiple cross-site scripting (XSS) vulnerabilities via the Services page affectinCheck if you run itEPSS 0.45%Oct 30, 2025
- Medium5.1The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.6 / Nagios XI 5.8.8 contains a cross-site scripting (XSS) vulnerability via the search and deletion interfaces.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.8 / Nagios XI 5.7.5 contains multiple cross-site scripting (XSS) vulnerabilities in the overlay UI elements andCheck if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.1 / Nagios XI 5.8.2 contains multiple cross-site scripting (XSS) vulnerabilities in Overlay modals.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple cross-site scripting (XSS) vulnerabilities in the object edit pages.Check if you run itEPSS 0.42%Oct 30, 2025
- Medium5.1The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.7 / Nagios XI 5.8.9 contains a cross-site scripting (XSS) vulnerability via the Audit Log page search input.Check if you run itEPSS 0.44%Oct 30, 2025
- High8.7The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple SQL injection vulnerabilities in the object edit pages.Check if you run itEPSS 0.91%Oct 30, 2025
- High8.7The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains a SQL injection vulnerability in the search text handling.Check if you run itEPSS 1.13%Oct 30, 2025
- Medium5.1The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.4 / Nagios XI 5.8.6 contains a reflected cross-site scripting (XSS) vulnerability via the Test Command functionCheck if you run itEPSS 0.52%Oct 30, 2025
- High8.7Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool.Check if you run itEPSS 3.38%Oct 30, 2025
- High7.2Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality.Check if you run itEPSS 0.75%Oct 30, 2025
- High8.6Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page.Check if you run itEPSS 2.27%Oct 30, 2025
- High8.7Nagios XI versions prior to 2012R1.3 contain a SQL injection vulnerability in the legacy Core Configuration Manager (CCM) interface.Check if you run itEPSS 1.12%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM command_test.php script.Check if you run itEPSS 2.45%Oct 30, 2025
- High7.1Nagios XI versions prior to 2024R1.1.4 contain a local file inclusion (LFI) vulnerability via its NagVis integration.Check if you run itEPSS 1.68%Oct 30, 2025
- Critical9.4Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin.Check if you run itEPSS 4.03%Oct 30, 2025
Sort