Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 22:05:46 +0000 cnvd-2022-05531 https://cve.radiocsirt.org/vuln/cnvd-2022-05531 cnvd-2022-05531 https://cve.radiocsirt.org/vuln/cnvd-2022-05531 EUVD-2026-334327 https://cve.radiocsirt.org/vuln/euvd-2026-334327 EUVD-2026-334327 https://cve.radiocsirt.org/vuln/euvd-2026-334327 fkie_cve-2021-37223 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37223 <p>Nagios Enterprises NagiosXI &lt;= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in schedulereport.php. Any authenticated user can create scheduled reports containing PDF screenshots of any view in the NagiosXI application. Due to lack of input sanitisation, the target page can be replaced with an SSRF payload to access internal resources or disclose local system files.</p> <p>Nagios Enterprises NagiosXI &lt;= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in schedulereport.php. Any authenticated user can create scheduled reports containing PDF screenshots of any view in the NagiosXI application. Due to lack of input sanitisation, the target page can be replaced with an SSRF payload to access internal resources or disclose local system files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-37223 GHSA-8gvx-2fxm-77jm https://cve.radiocsirt.org/vuln/ghsa-8gvx-2fxm-77jm <p>Nagios Enterprises NagiosXI &lt;= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in schedulereport.php. Any authenticated user can create scheduled reports containing PDF screenshots of any view in the NagiosXI application. Due to lack of input sanitisation, the target page can be replaced with an SSRF payload to access internal resources or disclose local system files.</p> <p>Nagios Enterprises NagiosXI &lt;= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in schedulereport.php. Any authenticated user can create scheduled reports containing PDF screenshots of any view in the NagiosXI application. Due to lack of input sanitisation, the target page can be replaced with an SSRF payload to access internal resources or disclose local system files.</p> https://cve.radiocsirt.org/vuln/ghsa-8gvx-2fxm-77jm gsd-2021-37223 https://cve.radiocsirt.org/vuln/gsd-2021-37223 gsd-2021-37223 https://cve.radiocsirt.org/vuln/gsd-2021-37223