GCVE - cpe:2.3:a:serverscheck:monitoring_software:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:serverscheck:monitoring_software:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Serverscheck (`cf9dda00-499f-5083-a004-19984741f833`)
Product	Monitoring Software (`05249826-9b06-5530-b494-42f47f36959b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-18552`	vulnerable	2026-06-08 05:11:14.233191	Details available ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality loss) by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug (via the sensor_details.html id parameter) that allows creating empty files in arbitrary directories. Published: 2018-10-24T22:00:00.000Z Updated: 2024-08-05T11:15:59.867Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/149907/ServersCheck-Monitoring-Software-14.3.3-Arbitrary-File-Write-DoS.html http://hyp3rlinx.altervista.org/advisories/CVE-2018-18552-SERVERSCHECK-MONITORING-SOFTWARE-ARBITRARY-FILE-WRITE-DOS.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18551`	vulnerable	2026-06-08 05:11:14.232662	Details available ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter, sensors.html type parameter, sensors.html device parameter, report.html location parameter, group_delete.html group parameter, report_save.html query parameter, sensors.html location parameter, or group_delete.html group parameter. Published: 2018-10-24T22:00:00.000Z Updated: 2024-08-05T11:15:59.825Z Open on db.gcve.eu Reference links http://hyp3rlinx.altervista.org/advisories/CVE-2018-18551-SERVERSCHECK-MONITORING-SOFTWARE-CROSS-SITE-SCRIPTING.txt http://packetstormsecurity.com/files/149914/ServersCheck-Monitoring-Software-14.3.3-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-17832`	vulnerable	2026-06-08 05:09:09.951999	Details available ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settings_SMS_ALERT_TYPE parameter, and JavaScript can be executed on settings-save.html (the Settings - SMS Alerts page). Published: 2017-12-22T18:00:00.000Z Updated: 2024-08-05T21:06:48.298Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/145517/ServersCheck-Monitoring-Software-Cross-Site-Scripting.html https://serverscheck.com/monitoring-software/release.asp	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.