Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Fogproject HIGH 8.7
CVE-2026-47685

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the unauthenti…

Fix: 1.5.10.1832+
Fix from $1,950 2026-07-21
Fogproject HIGH 8.7
CVE-2026-47687

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `selectFor…

Fix: 1.5.10.1832+
Fix from $1,950 2026-07-21
Fogproject HIGH 8.2
CVE-2026-47688

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `clearAES`…

Fix: 1.5.10.1832+
Fix from $1,950 2026-07-21
Fogproject MEDIUM 5.2
CVE-2026-47689

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `buildRow(…

Fix: 1.5.10.1832+
Fix from $1,600 2026-07-21
Fogproject CRITICAL 9.1
CVE-2025-58443EPSS 19%

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass v…

Fix: after 1.5.10.1673
Fix from $2,300 2025-09-06
Fogproject MEDIUM 5.3
CVE-2024-42349

FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.4 and earlier can leak authorized and rejected logins via log…

Fix: 1.5.10.47+
Fix from $1,600 2024-08-02
Fogproject HIGH 8.6
CVE-2024-42348

FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a comput…

Fix: 1.5.10.41.3+
Fix from $1,950 2024-08-02
Fogproject HIGH 7.8
CVE-2024-41954

FOG is a cloning/imaging/rescue suite/inventory management system. The application stores plaintext service account credentials in the "/opt/fog/.fog…

Fix: after 1.5.10.41
Fix from $1,950 2024-07-31
Fogproject MEDIUM 5.9
CVE-2024-41108

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improper access control since only …

Fix: 1.5.10.41+
Fix from $1,600 2024-07-31
Fogproject HIGH 8.8
CVE-2024-40645

FOG is a cloning/imaging/rescue suite/inventory management system. An improperly restricted file upload feature allows authenticated users to execute…

Fix: after 1.5.10.41
Fix from $1,950 2024-07-31
Fogproject CRITICAL 9.8
CVE-2024-39914EPSS 23%

FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected…

Fix: 1.5.10.41+
Fix from $2,300 2024-07-12
Fogproject MEDIUM 6.4
CVE-2024-39916

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. There is a security issue with the NFS configuration in /etc/expo…

Fix: after 1.5.10
Fix from $1,600 2024-07-12
Fogproject HIGH 7.8
CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_ro…

Fix: 1.5.10.41+
Fix from $1,950 2024-05-27
Fogproject HIGH 7.5
CVE-2023-46236

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, a server-side-request-forgery (SSRF) vul…

Fix: 1.5.10+
Fix from $1,950 2023-10-31
Fogproject MEDIUM 6.1
CVE-2023-46235

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10.15, due to a lack of request sanitization…

Fix: 1.5.10.15+
Fix from $1,600 2023-10-31
Fogproject MEDIUM 5.3
CVE-2023-46237

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, an endpoint intended to offer limited en…

Fix: 1.5.10+
Fix from $1,600 2023-10-31
Fogproject HIGH 8.8
CVE-2021-32243

FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated).

No fix yet
Fix from $1,950 2021-06-16