| Bug | Description |
|---|
| CVE-2018-18245 | Nagios Core 4.4.2 has XSS via the alert summary reports of plugin resu ... |
| CVE-2017-14312 | Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root ... |
| CVE-2016-10089 | Nagios 4.3.2 and earlier allows local users to gain root privileges vi ... |
| CVE-2016-9566 | base/logging.c in Nagios Core before 4.2.4 allows local users with acc ... |
| CVE-2016-9565 | MagpieRSS, as used in the front-end component in Nagios Core before 4. ... |
| CVE-2016-8641 | A privilege escalation vulnerability was found in nagios 4.2.x that oc ... |
| CVE-2016-0726 | The Fedora Nagios package uses "nagiosadmin" as the default password f ... |
| CVE-2014-1878 | Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c i ... |
| CVE-2013-7205 | Off-by-one error in the process_cgivars function in contrib/daemonchk. ... |
| CVE-2013-7108 | Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, a ... |
| CVE-2013-4214 | rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE ... |
| CVE-2013-2214 | status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does no ... |
| CVE-2013-2029 | nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others ... |
| CVE-2012-6096 | Multiple stack-based buffer overflows in the get_history function in h ... |
| CVE-2011-2477 | Multiple cross-site scripting (XSS) vulnerabilities in config.c in con ... |
| CVE-2011-2179 | Multiple cross-site scripting (XSS) vulnerabilities in config.c in con ... |
| CVE-2011-1523 | Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.c ... |
| CVE-2009-2288 | statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execut ... |
| CVE-2008-6373 | Unspecified vulnerability in Nagios before 3.0.6 has unspecified impac ... |
| CVE-2008-5028 | Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagi ... |
| CVE-2007-5803 | Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in ... |