Nagvis kayıtları
nagvis üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %88,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-140 Improper Neutralization of Delimiters1
- CWE-203 Observable Discrepancy1
- CWE-704 Incorrect Type Conversion or Cast1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2022-3979İstismar yok | NagVis CoreLogonMultisite.php checkAuthCookie type conversionnagvis · nagvis · CWE-704 | Yüksek8,1 | — | %1,1 | 13 Kas 2022 |
27İzleyin | CVE-2022-46945Kavram kanıtı | Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.nagvis · nagvis · CWE-22 | Orta6,5 | — | %4,1 | 26 May 2023 |
27İzleyin | CVE-2021-33178İstismar yok | The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability.nagvis · nagvis · CWE-22 | Orta6,5 | — | %1,9 | 14 Eki 2021 |
27İzleyin | CVE-2025-39665İstismar yok | Livestatus Injection in dynmapsnagvis · nagvis · CWE-203 | Orta6,9 | — | %0,3 | 3 Ara 2025 |
24İzleyin | CVE-2017-6393İstismar yok | An issue was discovered in NagVis 1.9b12.nagvis · nagvis · CWE-79 | Orta6,1 | — | %1,0 | 2 Mar 2017 |
24İzleyin | CVE-2024-47093İstismar yok | Fix various XSS issues and potential RCEnagvis · nagvis · CWE-79 | Orta6,1 | — | %0,5 | 19 Ara 2024 |
24İzleyin | CVE-2023-46287İstismar yok | XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.nagvis · nagvis · CWE-79 | Orta6,1 | — | %0,5 | 20 Eki 2023 |
21İzleyin | CVE-2024-38866İstismar yok | Livestatus Injection in dynmapsnagvis · nagvis · CWE-140 | Orta5,3 | — | %0,4 | 27 May 2025 |
20İzleyin | CVE-2024-47090İstismar yok | XSS via WYSIWYG editornagvis · nagvis · CWE-79 | Orta5,1 | — | %0,2 | 27 May 2025 |
- CVE-2022-397932İzleyin
NagVis CoreLogonMultisite.php checkAuthCookie type conversion
YüksekCVSS 8,1İstismar yokEPSS %1nagvis · nagvis13 Kas 2022
- CVE-2022-4694527İzleyin
Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.
OrtaCVSS 6,5Kavram kanıtıEPSS %4nagvis · nagvis26 May 2023
- CVE-2021-3317827İzleyin
The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability.
OrtaCVSS 6,5İstismar yokEPSS %2nagvis · nagvis14 Eki 2021
- CVE-2025-3966527İzleyin
Livestatus Injection in dynmaps
OrtaCVSS 6,9İstismar yokEPSS %0nagvis · nagvis3 Ara 2025
- CVE-2017-639324İzleyin
An issue was discovered in NagVis 1.9b12.
OrtaCVSS 6,1İstismar yokEPSS %1nagvis · nagvis2 Mar 2017
- CVE-2024-4709324İzleyin
Fix various XSS issues and potential RCE
OrtaCVSS 6,1İstismar yokEPSS %1nagvis · nagvis19 Ara 2024
- CVE-2023-4628724İzleyin
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php.
OrtaCVSS 6,1İstismar yokEPSS %0nagvis · nagvis20 Eki 2023
- CVE-2024-3886621İzleyin
Livestatus Injection in dynmaps
OrtaCVSS 5,3İstismar yokEPSS %0nagvis · nagvis27 May 2025
- CVE-2024-4709020İzleyin
XSS via WYSIWYG editor
OrtaCVSS 5,1İstismar yokEPSS %0nagvis · nagvis27 May 2025