Browse CVEs

CRITICAL 9.8 CVE-2021-34074EPSS 7% PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a rel… Pandora Fms after 754 Fix from $2,3002021-06-25 MEDIUM 5.4 CVE-2021-35501 PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console. When a user or an administrator visits the console, t… Pandora Fms after 754 Fix from $1,6002021-06-25 CRITICAL 9.0 CVE-2020-11749EPSS 16% Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can tr… Pandora Fms after 746 Fix from $2,3002020-07-13 CRITICAL 9.8 CVE-2020-13854 Artica Pandora FMS 7.44 allows privilege escalation. Pandora Fms No fix yet Fix from $2,3002020-06-11 HIGH 8.8 CVE-2020-13851EPSS 91% Artica Pandora FMS 7.44 allows remote command execution via the events feature. Pandora Fms No fix yet Fix from $1,9502020-06-11 HIGH 7.2 CVE-2020-13852EPSS 28% Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature. Pandora Fms No fix yet Fix from $1,9502020-06-11 HIGH 7.2 CVE-2020-13855EPSS 28% Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature. Pandora Fms No fix yet Fix from $1,9502020-06-11 MEDIUM 5.4 CVE-2020-13853 Artica Pandora FMS 7.44 has persistent XSS in the Messages feature. Pandora Fms No fix yet Fix from $1,6002020-06-11 HIGH 7.5 CVE-2020-13850 Artica Pandora FMS 7.44 has inadequate access controls on a web folder. Pandora Fms No fix yet Fix from $1,9502020-06-11 MEDIUM 5.4 CVE-2019-19968 PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report Builder, and Graph Builder components. An authentica… Pandora Fms No fix yet Fix from $1,6002020-02-04 HIGH 7.8 CVE-2019-13035 Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowi… Pandora Fms 7.0_ng_735+ Fix from $1,9502019-06-29 MEDIUM 5.4 CVE-2018-11223 XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.… Artica Pandora Fms 7.0_ng_723+ Fix from $1,6002018-06-16