Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/centreon/centreon@20.4.14
Typecomposer
Namespacecentreon
Namecentreon
Version20.4.14
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version20.10.1
Latest_non_vulnerable_version22.10.15
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-qrd5-6c24-auf7
vulnerability_id VCID-qrd5-6c24-auf7
summary 
SQL Injection
A SQL injection vulnerability in reporting export in Centreon allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/reporting/dashboard/csvExport/csv_HostGroupLogs.php start and end parameters.
references
0
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37556
reference_id CVE-2021-37556
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37556
fixed_packages
0
url pkg:composer/centreon/centreon@20.4.14
purl pkg:composer/centreon/centreon@20.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@20.4.14
1
url pkg:composer/centreon/centreon@20.10.8
purl pkg:composer/centreon/centreon@20.10.8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@20.10.8
2
url pkg:composer/centreon/centreon@21.4.2
purl pkg:composer/centreon/centreon@21.4.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@21.4.2
aliases CVE-2021-37556
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qrd5-6c24-auf7
1
url VCID-tq65-7cpg-gbe6
vulnerability_id VCID-tq65-7cpg-gbe6
summary 
SQL Injection
A SQL injection vulnerability in a MediaWiki script in Centreon allows remote unauthenticated attackers to execute arbitrary SQL commands via the host_name and service_description parameters.
references
0
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37558
reference_id CVE-2021-37558
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37558
fixed_packages
0
url pkg:composer/centreon/centreon@20.4.14
purl pkg:composer/centreon/centreon@20.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@20.4.14
1
url pkg:composer/centreon/centreon@20.10.8
purl pkg:composer/centreon/centreon@20.10.8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@20.10.8
2
url pkg:composer/centreon/centreon@21.4.2
purl pkg:composer/centreon/centreon@21.4.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@21.4.2
aliases CVE-2021-37558
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tq65-7cpg-gbe6
2
url VCID-wt74-vp5g-qqfu
vulnerability_id VCID-wt74-vp5g-qqfu
summary 
SQL Injection
A SQL injection vulnerability in image generation in Centreon allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/views/graphs/generateGraphs/generateImage.php index parameter.
references
0
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37557
reference_id CVE-2021-37557
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37557
fixed_packages
0
url pkg:composer/centreon/centreon@20.4.14
purl pkg:composer/centreon/centreon@20.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@20.4.14
1
url pkg:composer/centreon/centreon@20.10.8
purl pkg:composer/centreon/centreon@20.10.8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@20.10.8
2
url pkg:composer/centreon/centreon@21.4.2
purl pkg:composer/centreon/centreon@21.4.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@21.4.2
aliases CVE-2021-37557
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wt74-vp5g-qqfu
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/centreon/centreon@20.4.14