Known Vulnerabilities for products from Xymon
Listed below are 16 of the newest known vulnerabilities associated with the vendor "Xymon".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-13486 json | In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of expansion ... | 9.8 - CRITICAL | 2019-08-27 | 2020-08-24 |
| CVE-2019-13485 json | In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostna... | 9.8 - CRITICAL | 2019-08-27 | 2020-08-24 |
| CVE-2019-13484 json | In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c. | 9.8 - CRITICAL | 2019-08-27 | 2019-08-28 |
| CVE-2019-13455 json | In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of &... | 9.8 - CRITICAL | 2019-08-27 | 2020-08-24 |
| CVE-2019-13452 json | In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c. | 9.8 - CRITICAL | 2019-08-27 | 2019-08-28 |
| CVE-2019-13451 json | In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c. | 9.8 - CRITICAL | 2019-08-27 | 2019-08-28 |
| CVE-2019-13274 json | In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parame... | 6.1 - MEDIUM | 2019-08-27 | 2019-08-28 |
| CVE-2019-13273 json | In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by s... | 9.8 - CRITICAL | 2019-08-27 | 2020-08-24 |
| CVE-2016-2058 json | Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon cli... | Not Provided | 2016-04-13 | 2026-05-06 |
| CVE-2016-2057 json | lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message que... | Not Provided | 2016-04-13 | 2026-05-06 |
| CVE-2016-2056 json | xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shel... | Not Provided | 2016-04-13 | 2026-05-06 |
| CVE-2016-2055 json | xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in th... | Not Provided | 2016-04-13 | 2026-05-06 |
| CVE-2016-2054 json | Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers ... | Not Provided | 2016-04-13 | 2026-05-06 |
| CVE-2015-1430 json | Buffer overflow in xymon 4.3.17-1. | 9.8 - CRITICAL | 2017-08-28 | 2017-08-31 |
| CVE-2013-4173 json | Directory traversal vulnerability in the trend-data daemon (xymond_rrd) in Xymon 4.x before 4.3.12 allows remote attackers to... | Not Provided | 2013-10-11 | 2026-04-29 |
| CVE-2011-1716 json | Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbi... | Not Provided | 2011-04-18 | 2026-04-29 |
Known software with vulnerabilities from Xymon
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Xymon | Xymon | 4.0 |