nagios3

14 results · Feed

• High 7.2
  CVE-2026-119742

  Nagios XI < 2026R2 OS Command Injection via mibs.php

  Nagios XI before 2026R2 contains an OS command injection vulnerability in the MIB upload feature where the install_mib() function in mibs.php sanitizes uploaded filenames with an incomplete character-substitution filter that omits semicolons, pipes, and non-s…

  Nagios Enterprises, LLC. Nagios XI nagios4 nagios3 Ubuntu
  Nov 3, 2026
• Unscored —
  CVE-2022-38247

  Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Settings page unde…

  nagios4 nagios3 icinga Ubuntu
  Sep 7, 2022
• Unscored —
  CVE-2022-38248

  Nagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at auditlog.php.

  nagios4 nagios3 icinga Ubuntu
  Sep 7, 2022
• Unscored —
  CVE-2022-38249

  Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version …

  nagios4 nagios3 icinga Ubuntu
  Sep 7, 2022
• Unscored —
  CVE-2022-38250

  Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name parameter at the Manage MIBs …

  nagios4 nagios3 icinga Ubuntu
  Sep 7, 2022
• Unscored —
  CVE-2022-38251

  Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Performance Settin…

  nagios4 nagios3 icinga Ubuntu
  Sep 7, 2022
• Unscored —
  CVE-2022-38254

  Nagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the ajax.php script in…

  nagios4 nagios3 icinga Ubuntu
  Sep 7, 2022
• Unscored —
  CVE-2018-18245

  Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivere…

  nagios3 nagios4 Debian Ubuntu
  Dec 17, 2018
• Unscored —
  CVE-2017-12847

  Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might al…

  nagios3 Ubuntu
  Aug 23, 2017
• Unscored —
  CVE-2016-6209

  Cross-site scripting (XSS) vulnerability in Nagios.

  nagios3 Ubuntu
  Mar 31, 2017
• Unscored —
  CVE-2016-9566 Public exploit

  base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain roo…

  nagios3 Ubuntu
  Dec 15, 2016
• Unscored —
  CVE-2014-1878

  Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and…

  nagios3 Ubuntu
  Feb 28, 2014
• Unscored —
  CVE-2013-7108 Public exploit EPSS 62%

  Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.1…

  nagios3 Ubuntu
  Jan 14, 2014
• Unscored —
  CVE-2013-7205

  Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows…

  nagios3 Ubuntu
  Jan 14, 2014