CVE-2021-32099

CVE-2021-32099 concerns Artica Pandora FMS 742, specifically the pandora_console component. A SQL injection in the /include/chart_generator.php endpoint via the session_id parameter enables an unauthenticated attacker to upgrade an unprivileged session, resulting in a login bypass. Multiple sourc...

CVE-2021-32100

CVE-2021-32100 describes a remote file inclusion vulnerability in Artica Pandora FMS 742, exploitable by the lowest privileged user. Multiple connected sources (Red Hat, CNVD, NVD mirrors, CNVD/CNNVD variants) corroborate that Pandora FMS 742 is affected. The vulnerability targets Pandora FMS sof...

Artica Pandora FMS 安全漏洞

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A remote file inclusion vulnerability exists in Artica Pandora FMS version 742, which can be exploited by a least privileg...

Artica Pandora FMS SQL注入漏洞

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An SQL injection vulnerability exists in Artica Pandora FMS version 742, which allows unauthenticated attackers to escalat...

Design/Logic Flaw

index.php?sec=godmode/extensions&sec2=extensions/filesrepo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742FIXPERL2020...

Pandora FMS Cross-Site Scripting Vulnerability (CNVD-2020-10481)

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A cross-site scripting vulnerability exists in Pandora FMS version 742. The vulnerability stems from a lack of proper...

CVE-2019-19968

PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report Builder, and Graph Builder components. An authenticated user can inject dangerous content into a data store that is later read and included in dynamic content...

Cross site scripting

PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report Builder, and Graph Builder components. An authenticated user can inject dangerous content into a data store that is later read and included in dynamic content...

Amazon Linux: Security Advisory (ALAS-2016-742)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11 Security Update : gstreamer (SAT Patch Number 742)

Specially crafted cover art tags in vorbis files could trigger a heap overflow in the base64 decoder. Attackers could potentially exploit that to execute arbitrary code. CVE-2009-0586 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502 exit...

Ubuntu USN-742-1 (jasper)

The remote host is missing an update to jasper announced via advisory USN-742-1. It was discovered that JasPer did not correctly handle memory allocation when parsing certain malformed JPEG2000 images. If a user were tricked into opening a specially crafted image with an application that uses...

Debian: Security Advisory (DSA-742-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-742-1 : cvs - buffer overflow

Derek Price, the current maintainer of CVS, discovered a buffer overflow in the CVS server, that serves the popular Concurrent Versions System, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...