Skip to content
OpenAdvisories

Package · Debian

nagvis

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-39665

    Livestatus Injection in dynmaps

    User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.

    Nagvis Nagvis nagvis nagvis Debian Ubuntu
  • Medium 5.1
    CVE-2024-47090

    XSS via WYSIWYG editor

    Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS

    Nagvis Nagvis nagvis nagvis Debian Ubuntu
  • Medium 5.3
    CVE-2024-38866

    Livestatus Injection in dynmaps

    Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection

    Nagvis Nagvis nagvis nagvis Debian Ubuntu
  • Medium 5.4
    CVE-2024-13722

    Checkmk NagVis Reflected Cross-site Scripting

    The "NagVis" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the context of the browser once clicked. The attack can be performed on both authenticated …

    Checkmk NagVis check-mk nagvis Debian Ubuntu
  • Medium 5.6
    CVE-2022-3979

    NagVis CoreLogonMultisite.php checkAuthCookie type conversion

    A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type convers…

    nagvis nagvis Debian Ubuntu