Insufficient permission validation on multiple REST API Quick Setup endpoints

Livestatus injection in autocomplete endpoint

Arbitrary file write with vcrtrace

Privilege escalation in jar_signature

Livestatus command injection in RestAPI

Fix 2FA bypass via RestAPI

1-Click compromize via CSRF

Livestatus injection in ajax_search

Livestatus injection in availability timeline

Open redirect and XSS via reset_url parameter

Cross Site Scripting through compromised remote site

Unrestricted upload and download paths in check_sftp

Privilege escalation via mk_mysql agent plugin on Windows

Privilege Escalation in Windows License plugin for Checkmk Windows Agent

Privilege escalation in mk_informix plugin

Privilege escalation in Windows agent

Privilege escalation in mk_informix plugin

Privilege escalation in windows agent

Privilege escalation in jar_signature

Privilege escalation in mk_tsm

Privilege escalation in agent via LD_LIBRARY_PATH

Potential livestatus injection in notification test

Remote site authentication secrets written to web log

LDAP credentials logged to Apache error log

CSRF token leaked in URL parameters

Information leak in mknotifyd

Missing brute-force protection for two factor authentication

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'

omd: Local privilege escalation when executing omd commands as root

Session hijacking via exposed session signing secret in distributed Checkmk setups

Trust of compromised eMudhra root CA in bundled CA stores