|
247661
|
5.4 |
MEDIUM
Network
|
nagios
|
nagios_xi
|
Nagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via the stored email address in admin/users.php.
|
CWE-79
Cross-site Scripting
|
CVE-2018-15713
|
2024-11-21 12:51 |
2018-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247662
|
6.1 |
MEDIUM
Network
|
nagios
|
nagios_xi
|
Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.
|
CWE-79
Cross-site Scripting
|
CVE-2018-15712
|
2024-11-21 12:51 |
2018-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247663
|
8.8 |
HIGH
Network
|
nagios
|
nagios_xi
|
Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The attacker can then use the new API key to execute API calls at elevated privileg…
|
CWE-78
OS Command
|
CVE-2018-15711
|
2024-11-21 12:51 |
2018-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247664
|
7.8 |
HIGH
Local
|
nagios
|
nagios_xi
|
Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.
|
CWE-78
OS Command
|
CVE-2018-15710
|
2024-11-21 12:51 |
2018-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247665
|
8.8 |
HIGH
Network
|
nagios
|
nagios_xi
|
Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request.
|
CWE-78
OS Command
|
CVE-2018-15709
|
2024-11-21 12:51 |
2018-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247666
|
9.8 |
CRITICAL
Network
|
nagios
|
nagios_xi
|
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.
|
NVD-CWE-noinfo
|
CVE-2018-15708
|
2024-11-21 12:51 |
2018-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247667
|
8.1 |
HIGH
Network
|
pivotal_software
|
credhub_service_broker
|
Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret…
|
CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
|
CVE-2018-15795
|
2024-11-21 12:51 |
2018-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247668
|
7.1 |
HIGH
Local
|
dell
|
emc_recoverpoint emc_recoverpoint_for_virtual_machines
|
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2018-15772
|
2024-11-21 12:51 |
2018-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247669
|
5.5 |
MEDIUM
Local
|
emc
|
recoverpoint recoverpoint_for_virtual_machines
|
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to…
|
CWE-200
Information Exposure
|
CVE-2018-15771
|
2024-11-21 12:51 |
2018-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247670
|
8.1 |
HIGH
Network
|
pivotal_software
|
bits_service
|
Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing th…
|
CWE-326
Inadequate Encryption Strength
|
CVE-2018-15796
|
2024-11-21 12:51 |
2018-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|