Pandora FMS vulnerabilities
56 CVEs and advisories name Pandora FMS as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-35306OS Command injection in Ajax PHP files through HTTP Request
- CVE-2024-35305Unauth Time-Based SQL Injection via API
- CVE-2024-35304System command injection through Netflow function
- CVE-2023-41793Path Traversal and Untrusted Upload File
- CVE-2023-44092OS Command Injection
- CVE-2023-44091Unauth Time-Based SQL Injection
- CVE-2023-44090UnautH SQL Injection
- CVE-2023-44089XSS in Visual Console
- CVE-2023-44088SQL Injection in Visual Console
- CVE-2023-41815XSS in File manager
- CVE-2023-41814XSS Vulnerability Messages
- CVE-2023-41813User notification settings edition
- CVE-2023-41812Uploading executables via the file manager
- CVE-2023-41811Stored XSS Via Site News Page
- CVE-2023-41810Stored XSS Via Dashboard Panel
- CVE-2023-41808Arbitrary File Read As Root Via GoTTY Page
- CVE-2023-41807Linux Local Privilege Escalation Via GoTTY Page
- CVE-2023-41806Misassignment of privileges can cause DOS attack
- CVE-2023-41792Lack of Authorization and Stored XSS Via SNMP Trap Editor Page
- CVE-2023-41791Lack of Authorization and Stored XSS Via Translation Abuse
- CVE-2023-41790Traversal Path on PHP file
- CVE-2023-41789Unauthenticated Admin Account Takeover Via XSS
- CVE-2023-41788Remote Code Execution via File Uploader
- CVE-2023-41787Arbitrary File Read
- CVE-2023-41786Database backups availability by low-privileged users
- CVE-2023-4677Unauthenticated Admin Account Takeover Via Cron Log File Backups