TI-2019-15206 CVE-2019-25066 · GHSA-p28j-xhp9-88wp
ajenti API privileges management
Priority HIGH 71
A vulnerability has been found in ajenti 2.1.31 and classified as critical.
ajenti
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
ajenti records in CISA KEVNo ajenti vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records in Ajenti · all components
TI-2026-22317 CVE-2026-27975 · GHSA-vcw3-r3fx-j444
Ajenti has a potential Remote Code Execution
Priority MEDIUM 44
Ajenti is a Linux and BSD modular server admin panel.
TI-2018-15737 CVE-2018-1000082 · GHSA-2w58-27j5-f99h
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the…
Priority MEDIUM 41
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server.
TI-2018-15779 CVE-2018-1000126 · GHSA-8jpc-25w7-fj92
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code…
Priority LOW 36
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file.
TI-2018-15736 CVE-2018-1000081 · GHSA-mp27-2772-552q
Ajenti version version 2 contains a Input Validation vulnerability in ID string on…
Priority LOW 35
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing.
TI-2026-27329 CVE-2026-35175 · GHSA-73jv-44c3-j5p2
Ajenti has an authorization bypass during custom package installation
Priority LOW 31
Ajenti is a Linux and BSD modular server admin panel.
TI-2018-15735 CVE-2018-1000080 · GHSA-mc57-hw6g-6hw2
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins…
Priority LOW 30
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user.
TI-2018-15738 CVE-2018-1000083 · GHSA-f576-rxff-hpmj
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON…
Priority LOW 27
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server.
TI-2014-03523 CVE-2014-4301 · GHSA-2ch8-f849-pjg3
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (…
TI-2014-01792 CVE-2014-2260 · GHSA-9crx-p357-5vw8
Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in…
Priority LOW 20
Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron…