https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T03:20:58.762251+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-9781 CVE-2017-9781 2026-10-03T03:20:59.222366+00:00

A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthenticated remote attacker to inject arbitrary HTML or JavaScript via the _username parameter when attempting authentication to webapi.py, which is returned unencoded with content type text/html.

 https://vulnerability.circl.lu/vuln/usn-5527-1 USN-5527-1 — check-mk vulnerabilities 2026-10-03T03:20:59.222463+00:00

Affected: Ubuntu:18.04:LTS: check-mk

It was discovered that Checkmk incorrectly handled authentication. An attacker could possibly use this issue to cause a race condition leading to information disclosure. (CVE-2017-14955)

It was discovered that Checkmk incorrectly handled certain inputs. An attacker could use these cross-site scripting issues to inject arbitrary html or javascript code to obtain sensitive information including user information, session cookies and valid credentials. (CVE-2017-9781, CVE-2021-36563, CVE-2021-40906, CVE-2022-24565)