Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core…

Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 all…

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1…

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before …

A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an a…

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php ch…

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSe…

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 par…

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php c…

Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x…

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2…

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote at…

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the …

Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4…

Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4…

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and ea…

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a…

Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name param…

The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" admi…

Cross-site scripting (XSS) vulnerability in Nagios.

Nagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability vi…

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the M…

Nagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS) vulnerabi…

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the S…

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the S…

A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in wh…

Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root…

UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE…

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on t…

Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuratio…