Known vulnerabilities in Xymon

Known vulnerabilities in Xymon

Vendor: GNU

Software: Xymon

Software CPE: cpe:2.3:a:gnu:xymon:*:*:*:*:*:*:*:*

Website: https://www.gnu.org/

Total vulnerabilities: 15

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU21087 - Memory corruption CVE-2019-13273	CWE-119	High	No	No	4.3.29	12.09.2019	SB2019091204
#VU21086 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-13274	CWE-79	Low	No	No	4.3.29	12.09.2019	SB2019091204
#VU21085 - Memory corruption CVE-2019-13451	CWE-119	High	No	No	4.3.29	12.09.2019	SB2019091204
#VU21084 - Stack-based buffer overflow CVE-2019-13455	CWE-121	High	No	No	4.3.29	12.09.2019	SB2019091204
#VU21083 - Memory corruption CVE-2019-13484	CWE-119	High	No	No	4.3.29	12.09.2019	SB2019091204 SB2019121201 SB2019121824 and 7 more
#VU21082 - Stack-based buffer overflow CVE-2019-13486	CWE-121	High	No	No	4.3.29	12.09.2019	SB2019091204 SB2019121201 SB2019121824 and 7 more
#VU21060 - Stack-based buffer overflow CVE-2019-13485	CWE-121	Medium	No	No	4.3.29	11.09.2019	SB2019091204 SB2019121201 SB2019121824 and 7 more
#VU21054 - Memory corruption CVE-2019-13452	CWE-119	Medium	No	No	4.3.29	11.09.2019	SB2019091204
#VU40380 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2016-2058	CWE-79	Low	No	No	-	13.04.2016	SB2016041322
#VU40381 - Permissions, Privileges, and Access Controls CVE-2016-2057	CWE-264	Low	No	No	-	13.04.2016	SB2016041323
#VU40382 - Command injection CVE-2016-2056	CWE-77	High	No	No	-	13.04.2016	SB2016041323
#VU40383 - Exposure of sensitive information to an unauthorized actor CVE-2016-2055	CWE-200	Medium	No	No	-	13.04.2016	SB2016041323
#VU40384 - Memory corruption CVE-2016-2054	CWE-119	High	No	No	-	13.04.2016	SB2016041322
#VU42471 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2013-4173	CWE-22	Medium	No	No	-	12.10.2013	SB2013101207
#VU45120 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2011-1716	CWE-79	Low	No	No	-	18.04.2011	SB2011041804