pkg:Debian/nagios4

All known vulnerabilities

• HIGH8.8CVE-2020-35269Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, like adding – deletin…
  from 0
• MEDIUM5.5CVE-2018-13458qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local deni…
  from 0, < 4.3.4-3
• MEDIUM5.5CVE-2018-13457qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local deni…
  from 0, < 4.3.4-3
• MEDIUM5.5qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a loc…
  from 0, < 4.3.4-3
• MEDIUM5.4Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified chec…
  from 0, < 4.3.4-3
• MEDIUM4.9Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify t…
  from 0, < 4.3.4-4