Page 10 of 81 results (0.002 seconds)

CVSS: 8.8EPSS: 7%CPEs: 1EXPL: 0

CVE-2020-15901

https://notcve.org/view.php?id=CVE-2020-15901

In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys. En Nagios XI versiones anteriores a 5.7.3, el archivo ajaxhelper.php permite a atacantes autentificados remotos ejecutar comandos arbitrarios por medio de cmdsubsys • https://insinuator.net/2020/07/security-advisories-for-nagios-xi https://www.nagios.com/downloads/nagios-xi/change-log https://www.nagios.com/products/security •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-15902

https://notcve.org/view.php?id=CVE-2020-15902

Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option. Graph Explorer en Nagios XI versiones anteriores a 5.7.2, permite un ataque de tipo XSS por medio de la opción link url • https://insinuator.net/2020/07/security-advisories-for-nagios-xi https://www.nagios.com/downloads/nagios-xi/change-log https://www.nagios.com/products/security • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 5%CPEs: 1EXPL: 1

CVE-2020-10819

https://notcve.org/view.php?id=CVE-2020-10819

Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter. Nagios XI versión 5.6.11, permite un ataque de tipo XSS por medio del parámetro username del archivo includes/components/ldap_ad_integration/. • https://code610.blogspot.com/2020/03/nagios-5611-xssd.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 5%CPEs: 1EXPL: 1

CVE-2020-10820

https://notcve.org/view.php?id=CVE-2020-10820

Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter. Nagios versión XI 5.6.11, permite un ataque de tipo XSS por medio del parámetro password del archivo includes/components/ldap_ad_integration/. • https://code610.blogspot.com/2020/03/nagios-5611-xssd.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 5%CPEs: 1EXPL: 1

CVE-2020-10821

https://notcve.org/view.php?id=CVE-2020-10821

Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter. Nagios versión XI 5.6.11, permite un ataque de tipo XSS por medio del parámetro theme del archivo account/main.php. • https://code610.blogspot.com/2020/03/nagios-5611-xssd.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •