Skip to content
Noroxi

Nagios records

302 published records for vendor nagios.

Researcher profile

Entered KEV
4 · 1.3%
Weaponized
17 · 5.6%
Pre-auth RCE
29
With a fix record
28.5%
Median publish → KEV
337 days

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

302 records
  • CVE-2019-15949
    88Now

    Nagios XI before 5.6.6 allows remote command execution as root.

    HighCVSS 8.8KEVWeaponizedEPSS 77%

    nagios · nagios xiSep 5, 2019

  • CVE-2021-25298
    87Now

    Nagios XI version xi-5.7.5 is affected by OS command injection.

    HighCVSS 8.8KEVWeaponizedEPSS 73%

    nagios · nagios xiFeb 15, 2021

  • CVE-2021-25296
    87Now

    Nagios XI version xi-5.7.5 is affected by OS command injection.

    HighCVSS 8.8KEVWeaponizedEPSS 71%

    nagios · nagios xiFeb 15, 2021

  • CVE-2021-25297
    82Now

    Nagios XI version xi-5.7.5 is affected by OS command injection.

    HighCVSS 8.8KEVWeaponizedEPSS 56%

    nagios · nagios xiFeb 15, 2021

  • CVE-2021-37344
    68This week

    Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used

    CriticalCVSS 9.8No exploitEPSS 96%

    nagios · nagios xi switch wizardAug 13, 2021

  • CVE-2018-15708
    66This week

    Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.

    CriticalCVSS 9.8WeaponizedEPSS 89%

    nagios · nagios xiNov 14, 2018

  • CVE-2021-37350
    63This week

    Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.

    CriticalCVSS 9.8No exploitEPSS 79%

    nagios · nagios xiAug 13, 2021

  • CVE-2023-48085
    62This week

    Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php.

    CriticalCVSS 9.8No exploitEPSS 75%

    nagios · nagios xiDec 14, 2023

  • CVE-2021-37346
    61This week

    Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements

    CriticalCVSS 9.8No exploitEPSS 73%

    nagios · nagios xi watchguard wizardAug 13, 2021

  • CVE-2018-8734
    60This week

    SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrar

    CriticalCVSS 9.8WeaponizedEPSS 53%

    nagios · nagios xiApr 17, 2018

  • CVE-2018-8733
    60This week

    Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated atta

    CriticalCVSS 9.8WeaponizedEPSS 26%

    nagios · nagios xiApr 17, 2018

  • CVE-2026-2041
    58Plan

    Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 75%

    nagios · nagios xiFeb 20, 2026

  • CVE-2026-2043
    58Plan

    Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 75%

    nagios · nagios xiFeb 20, 2026

  • CVE-2009-2288
    55Plan

    statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) T

    HighCVSS 7.5WeaponizedEPSS 83%

    nagios · nagiosJul 1, 2009

  • CVE-2018-8735
    54Plan

    Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands

    HighCVSS 8.8WeaponizedEPSS 63%

    nagios · nagios xiApr 17, 2018

  • CVE-2021-25299
    53Plan

    Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS).

    MediumCVSS 6.1Proof of conceptEPSS 97%

    nagios · nagios xiFeb 15, 2021

  • CVE-2020-35578
    53Plan

    An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0.

    HighCVSS 7.2WeaponizedEPSS 81%

    nagios · nagios xiJan 13, 2021

  • CVE-2024-24401
    53Plan

    SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitorin

    CriticalCVSS 9.8Proof of conceptEPSS 45%

    nagios · nagios xiFeb 26, 2024

  • CVE-2020-5791
    52Plan

    Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute op

    HighCVSS 7.2WeaponizedEPSS 78%

    nagios · nagios xiOct 20, 2020

  • CVE-2013-1362
    51Plan

    Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute ar

    HighCVSS 7.5WeaponizedEPSS 71%

    nagios · remote plug in executorJul 9, 2013

  • CVE-2012-6096
    50Plan

    Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2,

    HighCVSS 7.5WeaponizedEPSS 66%

    nagios · nagiosJan 22, 2013

  • CVE-2021-38156
    49Plan

    In Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative users attempt to edit a dashboard.

    MediumCVSS 5.4Proof of conceptEPSS 92%

    nagios · nagios xiSep 15, 2021

  • CVE-2019-9164
    49Plan

    Command injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary remote commands via a new autodiscovery job.

    HighCVSS 8.8No exploitEPSS 45%

    nagios · nagios xiMar 28, 2019

  • CVE-2018-8736
    49Plan

    A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability esca

    HighCVSS 8.8WeaponizedEPSS 45%

    nagios · nagios xiApr 17, 2018

  • CVE-2023-48084
    49Plan

    Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.

    CriticalCVSS 9.8Proof of conceptEPSS 33%

    nagios · nagios xiDec 14, 2023