Vendors / Tildeslash Ltd. Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 4
Exploited now Tildeslash Ltd. records in CISA KEV No Tildeslash Ltd. vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00498 · Published 2026-01-28 · No fix listed CWE-863
Priority MEDIUM 62
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.21107 · Published 2005-02-13 · No fix listed
Priority MEDIUM 60
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.16567 · Published 2005-05-10 · No fix listed
Priority MEDIUM 46
An issue was discovered in /admin/users/update in M/Monit before 3.7.3.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02086 · Published 2019-04-21 · No fix listed CWE-640
Priority MEDIUM 42
An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authorization.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00893 · Published 2023-07-18 · No fix listed CWE-863
Priority MEDIUM 41
A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02879 · Published 2019-04-22 · No fix listed CWE-125
Priority LOW 32
M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API endpoint.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00482 · Published 2026-01-28 · No fix listed CWE-522
Priority LOW 31
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack.
CVSS 3.0 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00882 · Published 2018-09-10 · No fix listed CWE-352
Priority LOW 29
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03693 · Published 2005-02-13 · No fix listed
Priority LOW 26
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01687 · Published 2005-05-10 · No fix listed
Open these records in search → All records by CVSS severity
3 4 3 0 0
THREATIST.IORead the docs