Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Pandora FMS 777 Clear all filters
TI-2024-23365 CVE-2024-35306 · GHSA-8f4h-35jg-wp7g

OS Command injection in Ajax PHP files through HTTP Request

Priority MEDIUM 41

OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables.

CVSS 4.0HIGH 8.7 Adjacent network High privileges No interaction EPSS 0.00926 Published 2024-06-10 Fixed in 777 CWE-78
TI-2024-23364 CVE-2024-35305 · GHSA-jh77-xp2v-pxpp

Unauth Time-Based SQL Injection via API

Priority MEDIUM 41

Unauth Time-Based SQL Injection in API allows to exploit HTTP request Authorization header.

CVSS 4.0HIGH 8.9 Adjacent network Low privileges No interaction EPSS 0.00374 Published 2024-06-10 Fixed in 777 CWE-89
TI-2024-23363 CVE-2024-35304 · GHSA-hgc2-p5rv-xww2

OS command injection in Pandora FMS

Priority MEDIUM 44

System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands.

CVSS 4.0CRITICAL 9.3 Network Low privileges User interaction EPSS 0.01092 Published 2024-06-10 Fixed in 777 CWE-78