Vulnerability index

Browse CVEs

74 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Pandora Fms CRITICAL 9.8
CVE-2026-34187

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affec…

Fix: 777.17 / 802+
Fix from $2,300 2026-05-12
Pandora Fms HIGH 8.8
CVE-2026-30810

Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800

Fix: 777.17 / 802+
Fix from $1,950 2026-05-12
Pandora Fms CRITICAL 9.1
CVE-2026-30805

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 throu…

Fix: 777.17 / 802+
Fix from $2,300 2026-05-12
Pandora Fms HIGH 8.8
CVE-2026-30807

Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: fro…

Fix: 777.17 / 802+
Fix from $1,950 2026-05-12
Pandora Fms HIGH 8.1
CVE-2026-30808

Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777 through 800

Fix: 777.17 / 802+
Fix from $1,950 2026-05-12
Pandora Fms HIGH 8.8
CVE-2026-34186

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora F…

Fix: 800.1+
Fix from $1,950 2026-04-13
Pandora Fms HIGH 7.2
CVE-2026-34188

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue …

Fix: 800.1+
Fix from $1,950 2026-04-13
Pandora Fms HIGH 8.8
CVE-2026-30813

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora F…

Fix: 800.1+
Fix from $1,950 2026-04-13
Pandora Fms MEDIUM 5.4
CVE-2026-30812

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects P…

Fix: 800.1+
Fix from $1,600 2026-04-13
Pandora Fms HIGH 8.8
CVE-2026-30806

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report. This issue affects Pa…

Fix: 800.1+
Fix from $1,950 2026-04-13
Pandora Fms HIGH 8.8
CVE-2026-30809

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affe…

Fix: 800.1+
Fix from $1,950 2026-04-13
Pandora Fms HIGH 7.2
CVE-2026-30804

Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 …

Fix: 800.1+
Fix from $1,950 2026-04-13
Pandora Fms MEDIUM 6.5
CVE-2026-30811

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 thr…

Fix: 800.1+
Fix from $1,600 2026-04-13
Pandora Fms CRITICAL 9.8
CVE-2025-5306EPSS 31%

Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. This issue affects Pandora FMS 774 through…

Fix: after 778
Fix from $2,300 2025-06-27
Pandora Fms CRITICAL 9.8
CVE-2024-12992

Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection via RCE. This issue affects Pandora FMS fro…

Fix: 777.8+
Fix from $2,300 2025-03-17
Pandora Fms HIGH 8.8
CVE-2024-12971EPSS 58%

Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 77…

Fix: 777.8+
Fix from $1,950 2025-03-17
Pandora Fms CRITICAL 9.8
CVE-2024-35304

System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands. This iss…

Fix: 777+
Fix from $2,300 2024-06-10
Pandora Fms CRITICAL 9.8
CVE-2024-35305

Unauth Time-Based SQL Injection in API allows to exploit HTTP request Authorization header. This issue affects Pandora FMS: from 700 through <777.

Fix: 777+
Fix from $2,300 2024-06-10
Pandora Fms CRITICAL 9.8
CVE-2024-35306

OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This issue affects Pandora FMS: f…

Fix: 777+
Fix from $2,300 2024-06-10
Pandora Fms CRITICAL 9.8
CVE-2024-35307

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the …

Fix: 777+
Fix from $2,300 2024-06-10
Pandora Fms CRITICAL 9.8
CVE-2023-44091

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. This u…

Fix: 776+
Fix from $2,300 2024-03-19
Pandora Fms CRITICAL 9.1
CVE-2023-44092

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS Command Inje…

Fix: 776+
Fix from $2,300 2024-03-19
Pandora Fms MEDIUM 6.5
CVE-2023-41793

: Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and do…

Fix: 776+
Fix from $1,600 2024-03-19
Pandora Fms MEDIUM 6.4
CVE-2023-44090

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-5817. This v…

Fix: 776+
Fix from $1,600 2024-03-19
Pandora Fms CRITICAL 9.8
CVE-2023-4677

Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the cron logs…

Fix: 773+
Fix from $2,300 2023-11-23
Pandora Fms HIGH 8.8
CVE-2023-41812

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. …

Fix: 774+
Fix from $1,950 2023-11-23
Pandora Fms MEDIUM 6.1
CVE-2023-41811

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting …

Fix: after 773
Fix from $1,600 2023-11-23
Pandora Fms HIGH 8.8
CVE-2023-41807

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows a user to escalate permissio…

Fix: after 773
Fix from $1,950 2023-11-23
Pandora Fms HIGH 7.5
CVE-2023-41806

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes that a bad privilege assignm…

Fix: after 773
Fix from $1,950 2023-11-23
Pandora Fms HIGH 7.5
CVE-2023-41808

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows an unauthorised user to esca…

Fix: after 773
Fix from $1,950 2023-11-23