Page 13 of 79 results (0.011 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-20172

https://notcve.org/view.php?id=CVE-2018-20172

An issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss/scripts/magpie_slashbox.php is not filtered, resulting in an XSS vulnerability. Se ha descubierto un problema en versiones anteriores a la 5.5.8 de Nagios XI. El parámetro rss_url en rss_dashlet/magpierss/scripts/magpie_slashbox.php no está filtrado, lo que resulta en una vulnerabilidad Cross-Site Scripting (XSS). • https://www.nagios.com/downloads/nagios-xi/change-log https://www.seebug.org/vuldb/ssvid-97714 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.8EPSS: 46%CPEs: 1EXPL: 4

CVE-2018-15708 – Nagios XI 5.5.6 - Magpie_debug.php Root Remote Code Execution

https://notcve.org/view.php?id=CVE-2018-15708

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request. Snoopy 1.0 en Nagios XI 5.5.6 permite que atacantes remotos no autenticados ejecuten comandos arbitrarios mediante una petición HTTP manipulada. Nagios XI version 5.5.6 suffers from remote code execution and privilege escalation vulnerabilities. • https://www.exploit-db.com/exploits/47039 https://www.exploit-db.com/exploits/46221 https://github.com/lkduy2602/Detecting-CVE-2018-15708-Vulnerabilities http://packetstormsecurity.com/files/153433/Nagios-XI-Magpie_debug.php-Root-Remote-Code-Execution.html https://www.tenable.com/security/research/tra-2018-37 https://medium.com/tenable-techblog/rooting-nagios-via-outdated-libraries-bb79427172 •

CVSS: 7.8EPSS: 5%CPEs: 1EXPL: 3

CVE-2018-15710 – Nagios XI 5.5.6 - Magpie_debug.php Root Remote Code Execution

https://notcve.org/view.php?id=CVE-2018-15710

Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php. Nagios XI 5.5.6 permite que atacantes autenticados locales escalen privilegios a root mediante Autodiscover_new.php. Nagios XI version 5.5.6 suffers from remote code execution and privilege escalation vulnerabilities. • https://www.exploit-db.com/exploits/47039 https://www.exploit-db.com/exploits/46221 http://packetstormsecurity.com/files/153433/Nagios-XI-Magpie_debug.php-Root-Remote-Code-Execution.html https://www.tenable.com/security/research/tra-2018-37 https://medium.com/tenable-techblog/rooting-nagios-via-outdated-libraries-bb79427172 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-15713

https://notcve.org/view.php?id=CVE-2018-15713

Nagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via the stored email address in admin/users.php. Nagios XI 5.5.6 permite Cross-Site Scripting (XSS) persistente de atacantes autenticados mediante la dirección de email almacenada en api_tool.php. • https://www.tenable.com/security/research/tra-2018-37 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 21%CPEs: 1EXPL: 1

CVE-2018-15712

https://notcve.org/view.php?id=CVE-2018-15712

Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php. Nagios XI 5.5.6 permite Cross-Site Scripting (XSS) reflejado de atacantes remotos no autenticados mediante el parámetro host en api_tool.php. • https://www.tenable.com/security/research/tra-2018-37 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •