lingej/pnp4nagios

lingej/pnp4nagios

docs.pnp4nagios.org

Releases30

Frequency3 months 1 week

Last Release almost 9 years ago

Stars153

PNP is an addon to Nagios which analyzes performance data provided by plugins and stores them automatically into RRD-databases.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2017-16834 ↗	Nov 16, 2017Thursday, 16 November 2017, 02:29	—	7.2 HIGH
PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.
CVE-2014-4908 ↗	Jul 11, 2014Friday, 11 July 2014, 11:08	—	4.3 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in PNP4Nagios through 0.6.22 allow remote attackers to inject arbitrary web script or HTML via the URI used for reaching (1) share/pnp/application/views/kohana_error_page.php or (2) share/pnp/application/views/template.php, leading to improper handling within an http-equiv="refresh" META element.