1065 matches found
CVE-2024-11320
CVE-2024-11320 affects Pandora FMS versions 700 through 777.4, where a misconfiguration in the LDAP authentication mechanism enables a command injection that can lead to remote code execution on the server. The Nuclei/NVD entries consistently describe arbitrary command execution via LDAP command ...
Pandora FMS 命令注入漏洞
Pandora FMS is a monitoring system from Pandora FMS, Inc. in the United States. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization. A command injection vulnerability exists in Pandora FMS versions 700 through 777.4, which stems from a...
CVE-2024-9987
A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agentsmodulescsv functionality. This issue affects Pandora FMS: from 700 through 777.3...
CVE-2024-9987
A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agentsmodulescsv functionality. This issue affects Pandora FMS: from 700 through 777.3...
CVE-2024-35308
A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pandora FMS: from 700 through 777.3...
CVE-2024-35308
A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pandora FMS: from 700 through 777.3...
CVE-2024-35308 Post-auth Arbitrary File Read in the Server Plugins Section
A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pandora FMS: from 700 through 777.3...
CVE-2024-35308
CVE-2024-35308 is a post-authentication arbitrary file read vulnerability in Pandora FMS, affecting versions 700 through 777.3. The flaw resides in the server’s plugins section within the plugin edition feature , enabling unauthorized access to server files after authentication. Observed impact (...
CVE-2024-35308 Post-auth Arbitrary File Read in the Server Plugins Section
A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pandora FMS: from 700 through 777.3...
CVE-2024-9987 SQL Injection in CSV Module Data Collection
A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agentsmodulescsv functionality. This issue affects Pandora FMS: from 700 through 777.3...
CVE-2024-9987
CVE-2024-9987 corresponds to a post-authentication SQL injection in Pandora FMS (extensions/agents_modules_csv, filters parameter) affecting versions from 700 up to
CVE-2024-9987 SQL Injection in CSV Module Data Collection
A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agentsmodulescsv functionality. This issue affects Pandora FMS: from 700 through 777.3...
Pandora FMS SQL注入漏洞
Pandora FMS is a monitoring system from Pandora FMS, USA. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization. A security vulnerability exists in Pandora FMS that stems from a post-authentication SQL injection vulnerability in the filters...
PT-2024-26426 · Unknown · Pandora Fms
Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 777.3 Description: A post-authentication arbitrary file read issue exists within the server plugins section in the plugin edition feature. This allows for unauthorized access to files on the server...
Pandora FMS 路径遍历漏洞
Pandora FMS is a monitoring system from Pandora FMS, USA. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization. A security vulnerability exists in Pandora FMS versions 700 through prior to 777.3 that stems from a post-authentication arbitrary fi...
The vulnerability of the Pandora FMS monitoring and management system, related to the failure to neutralize special elements used in the operating system’s command set, allows attackers to execute arbitrary commands.
The vulnerability of the Pandora FMS monitoring and management system lies in its inability to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands in Ajax PHP files through a specially created HTTP request...
CVE-2024-35306
OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This issue affects Pandora FMS: from 700 through 777...
CVE-2024-35304
System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands. This issue affects Pandora FMS: from 700 through 777...