Pandorafms vulnerabilities

Products

• Pandora Fms 49

Newest

• artica st pandora fms, pandora fms fms +1 more Pandora FMS Authenticated Remote Code Execution via Ping Module CVE-2025-34088 Public exploit 8.6 HighJuly 3, 2025
• pandora fms fms, pandorafms pandora fms +1 more Command Injection leading to RCE via LDAP Misconfiguration CVE-2024-11320 Public exploit EPSS 91.2% 6.9 MediumNovember 21, 2024
• pandora fms fms, pandorafms pandora fms +1 more Post-auth Arbitrary File Read in the Server Plugins Section CVE-2024-35308 8.3 HighOctober 22, 2024
• pandora fms fms, pandorafms pandora fms +1 more SQL Injection in CSV Module Data Collection CVE-2024-9987 8.6 HighOctober 22, 2024
• artica pandora fms, pandora fms fms +1 more Argument Injection Leading to Remote Code Execution in Realtime Graph Extension CVE-2024-35307 9.4 CriticalJune 10, 2024
• artica pandora fms, pandora fms fms +1 more System command injection through Netflow function CVE-2024-35304 9.3 CriticalJune 10, 2024
• artica pandora fms, pandora fms fms +1 more Path Traversal and Untrusted Upload File CVE-2023-41793 6.7 MediumMarch 19, 2024
• pandora fms fms, pandorafms pandora fms +1 more XSS in Visual Console CVE-2023-44089 6.1 MediumDecember 29, 2023
• pandora fms fms, pandorafms pandora fms +1 more SQL Injection in Visual Console CVE-2023-44088 Public exploit 5.9 MediumDecember 29, 2023
• pandora fms fms, pandorafms pandora fms +1 more XSS in File manager CVE-2023-41815 7.5 HighDecember 29, 2023
• pandora fms fms, pandorafms pandora fms +1 more XSS Vulnerability Messages CVE-2023-41814 3.7 LowDecember 29, 2023
• pandora fms fms, pandorafms pandora fms +1 more User notification settings edition CVE-2023-41813 3.0 LowDecember 29, 2023
• artica pfms pandora fms, pandora fms fms +1 more Stored Cross Site Scripting in syslog section CVE-2023-0828 6.7 MediumOctober 3, 2023
• artica pfms pandora fms, pandora fms fms +1 more Disabling the administrator's account through cross-site request forgery CVE-2023-24518 6.7 MediumOctober 3, 2023
• artica pfms pandora fms, pandora fms fms +1 more Remote Code Execution via Unrestricted File Upload CVE-2023-24517 Public exploit 6.4 MediumAugust 22, 2023
• artica pfms pandora fms, pandora fms fms +1 more Stored Cross Site Scripting - Special Days Module CVE-2023-24516 5.9 MediumAugust 22, 2023
• artica pfms pandora fms, pandora fms fms +1 more Stored Cross Site Scripting Vulnerability in Visual Console Module CVE-2023-24514 6.3 MediumAugust 22, 2023
• artica pfms pandora fms, pandora fms fms +1 more Server side request forgery in api checker CVE-2023-24515 5.2 MediumAugust 22, 2023
• artica pfms pandora fms, pandora fms fms +1 more Authentication bypass in password reset process CVE-2023-2807 6.4 MediumJune 13, 2023
• artica pfms pandora fms, pandora fms fms +1 more Reflected Cross Site Scripting in Search Functionality of Module Library CVE-2022-47373 Public exploit 6.4 MediumFebruary 15, 2023
• artica pfms pandora fms, pandora fms fms +1 more Stored cross-site scripting vulnerability in create event section CVE-2022-47372 7.6 HighFebruary 15, 2023
• artica pfms pandora fms, pandora fms fms +1 more Stored cross-site scripting vulnerability in the reporting dashboard module CVE-2022-45437 6.5 MediumFebruary 15, 2023
• artica pfms pandora fms, pandora fms fms +1 more Stored cross-site scripting vulnerability in network maps editor feature CVE-2022-45436 Public exploit 6.1 MediumFebruary 15, 2023
• artica pfms pandora fms, pandora fms fms +1 more Cross-site scripting vulnerability in the network maps edit functionality CVE-2022-43980 Public exploit 5.2 MediumJanuary 27, 2023
• artica pfms pandora fms, pandora fms fms +1 more Path Traversal leading to Local File Inclusion CVE-2022-43979 5.9 MediumJanuary 27, 2023
• artica pfms pandora fms, pandora fms fms +1 more Limited Authentication bypass due to hardcoded secret CVE-2022-43978 5.6 MediumJanuary 27, 2023
• artica pfms pandora fms, pandora fms fms +1 more Vulnerability XSS in service form name field CVE-2021-46678 4.0 MediumAugust 5, 2022
• artica pfms pandora fms, pandora fms fms +1 more Vulnerability XSS in module form name field CVE-2021-46680 4.0 MediumAugust 5, 2022
• artica pfms pandora fms, pandora fms fms +1 more Vulnerability XSS in Event filter name field CVE-2021-46677 4.0 MediumAugust 5, 2022
• artica pfms pandora fms, pandora fms fms +1 more Vulnerability XSS in Transaction Map name field CVE-2021-46676 4.0 MediumAugust 5, 2022
• artica pfms pandora fms, pandora fms fms +1 more Vulnerability XSS in service elements CVE-2021-46679 4.0 MediumAugust 5, 2022
• artica pfms pandora fms, pandora fms fms +1 more Improper Authorization in User Management to Vertical Privilege Escalation CVE-2022-26310 7.3 HighAugust 1, 2022
• artica pfms pandora fms, pandora fms fms +1 more Cross-Site Request en Bulk operation (User operation) CVE-2022-26309 3.7 LowAugust 1, 2022
• artica pfms pandora fms, pandora fms fms +1 more Improper Access Control in Configuration (Credential store) CVE-2022-26308 3.7 LowAugust 1, 2022
• artica pfms pandora fms, pandora fms fms +1 more Relative Path Traversal to Remote Code Execution in File Manager CVE-2022-1648 5.7 MediumJuly 26, 2022
• artica pfms pandora fms, pandora fms fms +1 more Stored Cross Site-Scripting in Agent Manager CVE-2022-2059 3.5 LowJuly 25, 2022
• artica pfms pandora fms, pandora fms fms +1 more Stored Cross Site-Scripting in File Manager CVE-2022-2032 3.5 LowJuly 25, 2022
• artica pfms pandora fms, pandora fms fms +1 more Vulnerability: Authenticated SQL Injection in API CVE-2022-0507 5.8 MediumMarch 9, 2022
• pandorafms pandora fms PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console.... CVE-2021-35501 5.4 MediumJune 25, 2021
• pandorafms pandora fms PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the... CVE-2021-34074 9.8 CriticalJune 25, 2021
• pandorafms pandora fms Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A... CVE-2020-11749 Public exploit EPSS 16.2% 9.0 CriticalJuly 13, 2020
• pandorafms pandora fms Artica Pandora FMS 7.44 allows remote command execution via the events feature. CVE-2020-13851 Public exploit EPSS 91.0% 8.8 HighJune 11, 2020
• pandorafms pandora fms Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via... CVE-2020-13852 EPSS 27.6% 7.2 HighJune 11, 2020
• pandorafms pandora fms Artica Pandora FMS 7.44 has persistent XSS in the Messages feature. CVE-2020-13853 5.4 MediumJune 11, 2020
• pandorafms pandora fms Artica Pandora FMS 7.44 allows privilege escalation. CVE-2020-13854 9.8 CriticalJune 11, 2020
• pandorafms pandora fms Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via... CVE-2020-13855 EPSS 27.6% 7.2 HighJune 11, 2020
• pandorafms pandora fms Artica Pandora FMS 7.44 has inadequate access controls on a web folder. CVE-2020-13850 7.5 HighJune 11, 2020
• pandorafms pandora fms PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report... CVE-2019-19968 5.4 MediumFebruary 4, 2020
• pandorafms pandora fms Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper... CVE-2019-13035 7.8 HighJune 29, 2019
• pandorafms artica pandora fms XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a... CVE-2018-11223 5.4 MediumJune 15, 2018
• Show olderLoading…