Approved changes feed: RSS · Atom
cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nagios (7fb1328e-019e-51f8-8fa9-c12efadd1bbe) |
|---|---|
| Product | Nagios (50575199-1514-50c1-89a9-fe9479fd126c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/nagios4 |
purl2cpe | 2026-06-01 10:14:43.731567 |
pkg:deb/ubuntu/nagios4 |
purl2cpe | 2026-06-01 10:14:43.731568 |
pkg:github/nagiosenterprises/nagioscore |
purl2cpe | 2026-06-01 10:14:43.731570 |
pkg:rpm/fedora/nagios |
purl2cpe | 2026-06-01 10:14:43.731571 |
pkg:rpm/opensuse/nagios |
purl2cpe | 2026-06-01 10:14:43.731573 |
pkg:sourceforge/nagios |
purl2cpe | 2026-06-01 10:14:43.731574 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-3698 |
vulnerable | 2026-06-08 05:13:55.379089 |
nagios cron job allows privilege escalation from user nagios to root
MEDIUM (5.7)
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
Published: 2020-02-28T13:20:14.152Z
Updated: 2024-09-16T16:33:41.138Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13441 |
vulnerable | 2026-06-08 05:10:51.318388 |
Details available
qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
Published: 2018-07-12T18:00:00.000Z
Updated: 2024-08-05T09:00:35.143Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12847 |
vulnerable | 2026-06-08 05:08:47.951181 |
Details available
Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a "kill `cat /pathname/nagios.lock`" command.
Published: 2017-08-23T21:00:00.000Z
Updated: 2024-08-05T18:51:06.962Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9566 |
vulnerable | 2026-06-08 05:08:24.035553 |
Details available
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.
Published: 2016-12-15T22:00:00.000Z
Updated: 2024-08-06T02:50:38.682Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9565 |
vulnerable | 2026-06-08 05:08:24.034885 |
Details available
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.
Published: 2016-12-15T22:00:00.000Z
Updated: 2024-08-06T02:50:38.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10089 |
vulnerable | 2026-06-08 05:07:17.255543 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5009 |
vulnerable | 2026-06-08 05:05:46.597757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4702 |
vulnerable | 2026-06-08 05:05:45.448782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4701 |
vulnerable | 2026-06-08 05:05:45.448334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7205 |
vulnerable | 2026-06-08 05:05:08.626734 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7108 |
vulnerable | 2026-06-08 05:05:08.443310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4214 |
vulnerable | 2026-06-08 05:04:34.630836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6096 |
vulnerable | 2026-06-08 05:02:59.437707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1523 |
vulnerable | 2026-06-08 04:58:00.086730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2288 |
vulnerable | 2026-06-08 04:51:27.628037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7313 |
vulnerable | 2026-06-08 04:51:06.755253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6373 |
vulnerable | 2026-06-08 04:50:54.920958 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5028 |
vulnerable | 2026-06-08 04:50:49.140942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5027 |
vulnerable | 2026-06-08 04:50:49.087977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4796 |
vulnerable | 2026-06-08 04:50:48.211829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5624 |
vulnerable | 2026-06-08 04:50:06.540703 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2162 |
vulnerable | 2026-06-08 04:48:59.021967 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.