Pnp4nagios

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Pnp4nagios records in CISA KEV

No Pnp4nagios vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pnp4nagios 6 records MEDIUM

Records

6 records

TI-2023-19741 CVE-2023-38350 · GHSA-99c6-mjfj-w86j

PNP4Nagios through 81ebfc5 has stored XSS in the AJAX controller via the basket API and…

MEDIUM 58

PNP4Nagios through 81ebfc5 has stored XSS in the AJAX controller via the basket API and filters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00519 Published 2023-07-15 No fix listed CWE-79

TI-2023-19740 CVE-2023-38349 · GHSA-jqw4-fm67-g67w

PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller.

MEDIUM 40

PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2023-07-15 No fix listed CWE-352

TI-2017-12382 CVE-2017-16834 · GHSA-hpg7-623w-gqxj

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account…

LOW 34

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivile…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00357 Published 2017-11-16 No fix listed CWE-732

TI-2014-04040 CVE-2014-4908 · GHSA-8q44-g323-pv3g

Multiple cross-site scripting (XSS) vulnerabilities in PNP4Nagios through 0.6.22 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in PNP4Nagios through 0.6.22 allow remote attackers to inject arbitrary web script or HTML via the URI used for reaching (1) share/pnp/application/views/kohana_error_pa…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01914 Published 2014-07-11 No fix listed CWE-79

TI-2014-04039 CVE-2014-4907 · GHSA-x4qq-4jc6-hr2v

Cross-site scripting (XSS) vulnerability in…

LOW 24

Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properl…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02214 Published 2014-07-11 No fix listed CWE-79

TI-2012-02985 CVE-2012-3457 · GHSA-v52g-ccj3-m6rp

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg…

LOW 11

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00342 Published 2012-08-12 No fix listed CWE-264

Open these records in search →

Critical	0
High	2
Medium	3
Low	1
No CVSS	0