Lucene search
+L

1211 matches found

Cvelist
Cvelist
•added 2026/05/12 3:09 p.m.•61 views

CVE-2026-30805 Insecure Default Initialization in API Authentication leads to Authentication Bypass

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...

9.1CVSS0.00479EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•30 views

PT-2026-40067

Name of the Vulnerable Software and Affected Versions Pandora FMS versions 777 through 800 Description Improper neutralization of special elements used in an SQL command allows SQL Injection via the graph container parameter. SQL Injection is a technique where an attacker inserts malicious SQL co...

9.8CVSS6AI score0.00379EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•27 views

PT-2026-40052

Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800...

7.1CVSS5.8AI score0.00417EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•26 views

Pandora FMS 安全漏洞

Pandora FMS is a monitoring system developed by the American company Pandora FMS. This system provides visual monitoring of networks, servers, virtual infrastructure, and applications. There are security vulnerabilities in the 777 to 800 version of Pandora FMS. These vulnerabilities stem from...

9.1CVSS5.8AI score0.00479EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•1 views

CVE-2026-30805: Initialization of a Resource with an Insecure Default

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...

9.1CVSS5.8AI score0.00479EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•31 views

Pandora FMS SQL注入漏洞

Pandora FMS is a monitoring system developed by the American company Pandora FMS. This system provides visual monitoring of networks, servers, virtual infrastructure, and applications. Versions 777 to 800 of Pandora FMS have a SQL injection vulnerability. This vulnerability arises from improper...

9.8CVSS5.9AI score0.00379EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•36 views

PT-2026-40049

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...

9.1CVSS5.8AI score0.00479EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•3 views

CVE-2026-34187: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•2 views

CVE-2026-30807: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800...

8.8CVSS5.8AI score0.00175EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•25 views

PT-2026-40050

Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•21 views

Pandora FMS 代码问题漏洞

Pandora FMS is a monitoring system developed by the American company Pandora FMS. This system provides visual monitoring of networks, servers, virtual infrastructure, and applications. There are code vulnerabilities in versions 777 to 800 of Pandora FMS, which stem from server-side request forger...

8.8CVSS5.9AI score0.00417EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•1 views

CVE-2026-30810: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•0 views

CVE-2026-30808: Session Fixation

Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777 through 800...

8.1CVSS5.8AI score0.00364EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/13 6:30 p.m.•16 views

EUVD-2026-21992

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800...

8.4CVSS5.8AI score0.0034EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/13 6:30 p.m.•16 views

EUVD-2026-21998

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields. This issue affects Pandora FMS: from 777 through 800...

8.7CVSS5.9AI score0.00439EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/13 6:30 p.m.•25 views

EUVD-2026-21988

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report. This issue affects Pandora FMS: from 777 through 800...

8.7CVSS5.8AI score0.01596EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/13 6:30 p.m.•12 views

EUVD-2026-21994

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800...

2.1CVSS5.8AI score0.00231EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/13 6:30 p.m.•12 views

EUVD-2026-21999

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution. This issue affects Pandora FMS: from 777 through 800...

7.5CVSS5.8AI score0.01712EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/13 6:30 p.m.•11 views

EUVD-2026-21996

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora FMS: from 777 through 800...

8.7CVSS5.9AI score0.00439EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/13 6:30 p.m.•13 views

EUVD-2026-21986

Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 through 800...

8.6CVSS5.9AI score0.00761EPSS
SaveExploits0References2
Rows per page
Query Builder