MO
Product
Monitor
9
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Monitor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40272 | 6.1 | Nov 14 | OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS) Affected: 8.3.0 through 8.3.3 |
| CVE-2014-4907 | – | Jul 11 | Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or… Affected: 6.3.0 |
| CVE-2013-6141 | – | Jan 29 | Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization Affected: through 6.1.2; 5.3.5; 5.4.0; 5.4.2; 5.5.0; 5.5.1; +23 more |
| CVE-2012-0264 | – | Dec 31 | op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors Affected: through 5.4.2; 5.3.5; 5.4.0 |
| CVE-2012-0263 | – | Dec 31 | monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error… Affected: through 5.5.0; 5.3.5; 5.4.0; 5.4.2 |
| CVE-2012-0262 | – | Dec 31 | op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in… Affected: through 5.5.1; 5.3.5; 5.4.0; 5.4.2; 5.5.0 |
| CVE-2012-0261 | – | Dec 31 | license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the… Affected: through 5.5.1; 5.3.5; 5.4.0; 5.4.2; 5.5.0 |
| CVE-2008-5028 | – | Nov 10 | Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and… Affected: through 4.0.0; 2.4; 2.6; 2.8; 3.0; 3.0.0; +5 more |
| CVE-2008-5027 | – | Nov 10 | The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary… Affected: through 4.0.0; 2.4; 2.6; 2.8; 3.0; 3.0.0; +5 more |
Showing 9