Nagvis records
9 published records for vendor nagvis.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 88.9%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-140 Improper Neutralization of Delimiters1
- CWE-203 Observable Discrepancy1
- CWE-704 Incorrect Type Conversion or Cast1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2022-3979No exploit | NagVis CoreLogonMultisite.php checkAuthCookie type conversionnagvis · nagvis · CWE-704 | High8.1 | — | 1.1% | Nov 13, 2022 |
27Monitor | CVE-2022-46945Proof of concept | Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.nagvis · nagvis · CWE-22 | Medium6.5 | — | 4.1% | May 26, 2023 |
27Monitor | CVE-2021-33178No exploit | The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability.nagvis · nagvis · CWE-22 | Medium6.5 | — | 1.9% | Oct 14, 2021 |
27Monitor | CVE-2025-39665No exploit | Livestatus Injection in dynmapsnagvis · nagvis · CWE-203 | Medium6.9 | — | 0.3% | Dec 3, 2025 |
24Monitor | CVE-2017-6393No exploit | An issue was discovered in NagVis 1.9b12.nagvis · nagvis · CWE-79 | Medium6.1 | — | 1.0% | Mar 2, 2017 |
24Monitor | CVE-2024-47093No exploit | Fix various XSS issues and potential RCEnagvis · nagvis · CWE-79 | Medium6.1 | — | 0.5% | Dec 19, 2024 |
24Monitor | CVE-2023-46287No exploit | XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.nagvis · nagvis · CWE-79 | Medium6.1 | — | 0.5% | Oct 20, 2023 |
21Monitor | CVE-2024-38866No exploit | Livestatus Injection in dynmapsnagvis · nagvis · CWE-140 | Medium5.3 | — | 0.4% | May 27, 2025 |
20Monitor | CVE-2024-47090No exploit | XSS via WYSIWYG editornagvis · nagvis · CWE-79 | Medium5.1 | — | 0.2% | May 27, 2025 |
- CVE-2022-397932Monitor
NagVis CoreLogonMultisite.php checkAuthCookie type conversion
HighCVSS 8.1No exploitEPSS 1%nagvis · nagvisNov 13, 2022
- CVE-2022-4694527Monitor
Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.
MediumCVSS 6.5Proof of conceptEPSS 4%nagvis · nagvisMay 26, 2023
- CVE-2021-3317827Monitor
The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability.
MediumCVSS 6.5No exploitEPSS 2%nagvis · nagvisOct 14, 2021
- CVE-2025-3966527Monitor
Livestatus Injection in dynmaps
MediumCVSS 6.9No exploitEPSS 0%nagvis · nagvisDec 3, 2025
- CVE-2017-639324Monitor
An issue was discovered in NagVis 1.9b12.
MediumCVSS 6.1No exploitEPSS 1%nagvis · nagvisMar 2, 2017
- CVE-2024-4709324Monitor
Fix various XSS issues and potential RCE
MediumCVSS 6.1No exploitEPSS 1%nagvis · nagvisDec 19, 2024
- CVE-2023-4628724Monitor
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.
MediumCVSS 6.1No exploitEPSS 0%nagvis · nagvisOct 20, 2023
- CVE-2024-3886621Monitor
Livestatus Injection in dynmaps
MediumCVSS 5.3No exploitEPSS 0%nagvis · nagvisMay 27, 2025
- CVE-2024-4709020Monitor
XSS via WYSIWYG editor
MediumCVSS 5.1No exploitEPSS 0%nagvis · nagvisMay 27, 2025