Nagios Nagios Core
5 CVEs affecting Nagios Nagios Core. Latest disclosed: 2020-12-23. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-35269 | High | 8.8 | 2020-12-23 | Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, like adding – deleting for hosts or serve… |
CVE-2017-14312 | High | 7.8 | 2017-09-11 | Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this file is owned by a non-root account (and… |
CVE-2018-13458 | Medium | 5.5 | 2018-07-12 | qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condit… |
CVE-2018-13457 | Medium | 5.5 | 2018-07-12 | qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condit… |
CVE-2018-18245 | Medium | 5.4 | 2018-12-17 | Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRP… |