auxiliary/scanner/http/nagios_xi_scanner
funktionalNagios XI Scanner
01
ausgenutzte CVEs (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-37343US | high8.8 | Exploit | ||
A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running N… | ||||
| CVE-2020-35578US | high7.2 | Exploit | ||
An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticat… | ||||
| CVE-2020-5792US | high7.2 | Exploit | ||
Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code wit… | ||||
| CVE-2020-5791US | high7.2 | Exploit | ||
Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privile… | ||||
| CVE-2019-15949US | high8.8OT kritisch | KEV | ||
Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan