Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
pandorafms vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv3
CVE-2023-24517
Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an malicious user to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prio...
Pandorafms Pandora Fms
1 Github repository
7.1
CVSSv3
CVE-2023-24518
A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an malicious user to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and previous versions versions on all...
Pandorafms Pandora Fms
8.8
CVSSv3
CVE-2022-0507
Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL.
Pandorafms Pandora Fms
6.1
CVSSv3
CVE-2021-46676
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an malicious user to perform javascript code executions via the transactional maps name field.
Pandorafms Pandora Fms
6.1
CVSSv3
CVE-2021-46677
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an malicious user to perform javascript code executions via the event filter name field.
Pandorafms Pandora Fms
6.1
CVSSv3
CVE-2021-46678
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an malicious user to perform javascript code executions via the service name field.
Pandorafms Pandora Fms
6.1
CVSSv3
CVE-2021-46679
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an malicious user to perform javascript code executions via service elements.
Pandorafms Pandora Fms
6.1
CVSSv3
CVE-2021-46680
A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an malicious user to perform javascript code executions via the module form name field.
Pandorafms Pandora Fms
5.4
CVSSv3
CVE-2022-26308
Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration (Credential store) where a user with the role of Operator (Write) could create, delete, view existing keys which are outside the intended role.
Pandorafms Pandora Fms
8.8
CVSSv3
CVE-2022-26309
Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation (User operation) resulting in elevation of privilege to Administrator group.
Pandorafms Pandora Fms
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-36920
buffer overflow
CVE-2024-36913
CVE-2024-5497
CVE-2024-23917
CVE-2024-4956
server-side request forgery
CVE-2024-35468
SSTI
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »