tildeslash records
10 published records for vendor tildeslash.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 70%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-863 Incorrect Authorization2
- CWE-125 Out-of-bounds Read1
- CWE-522 Insufficiently Protected Credentials1
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
46Plan | CVE-2003-1083Proof of concept | Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.tildeslash · monit | Critical10.0 | — | 21.1% | Dec 31, 2003 |
45Plan | CVE-2004-1898Proof of concept | Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via atildeslash · monit | Critical10.0 | — | 16.5% | Dec 31, 2004 |
40Plan | CVE-2019-11393No exploit | An issue was discovered in /admin/users/update in M/Monit before 3.7.3.tildeslash · monit · CWE-640 | Critical9.8 | — | 2.0% | Apr 22, 2019 |
35Monitor | CVE-2022-26563No exploit | An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authoriztildeslash · monit · CWE-863 | High8.8 | — | 0.8% | Jul 18, 2023 |
34Monitor | CVE-2020-36969No exploit | M/Monit 3.7.4 - Privilege Escalationtildeslash · m\/monit · CWE-863 | High8.7 | — | 0.4% | Jan 28, 2026 |
33Monitor | CVE-2019-11455No exploit | A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the conttildeslash · monit · CWE-125 | High8.1 | — | 3.0% | Apr 22, 2019 |
28Monitor | CVE-2020-36968No exploit | M/Monit 3.7.4 - Password Disclosuretildeslash · m\/monit · CWE-522 | High7.1 | — | 0.4% | Jan 28, 2026 |
23Monitor | CVE-2004-1897Proof of concept | Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Bastildeslash · monit | Medium5.0 | — | 8.6% | Dec 31, 2004 |
21Monitor | CVE-2003-1084No exploit | Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Lengthtildeslash · monit | Medium5.0 | — | 3.6% | Nov 24, 2003 |
21Monitor | CVE-2004-1899No exploit | The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 tildeslash · monit | Medium5.0 | — | 1.6% | Dec 31, 2004 |
- CVE-2003-108346Plan
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
CriticalCVSS 10.0Proof of conceptEPSS 21%tildeslash · monitDec 31, 2003
- CVE-2004-189845Plan
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a
CriticalCVSS 10.0Proof of conceptEPSS 16%tildeslash · monitDec 31, 2004
- CVE-2019-1139340Plan
An issue was discovered in /admin/users/update in M/Monit before 3.7.3.
CriticalCVSS 9.8No exploitEPSS 2%tildeslash · monitApr 22, 2019
- CVE-2022-2656335Monitor
An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authoriz
HighCVSS 8.8No exploitEPSS 0%tildeslash · monitJul 18, 2023
- CVE-2020-3696934Monitor
M/Monit 3.7.4 - Privilege Escalation
HighCVSS 8.7No exploitEPSS 0%tildeslash · m\/monitJan 28, 2026
- CVE-2019-1145533Monitor
A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the cont
HighCVSS 8.1No exploitEPSS 3%tildeslash · monitApr 22, 2019
- CVE-2020-3696828Monitor
M/Monit 3.7.4 - Password Disclosure
HighCVSS 7.1No exploitEPSS 0%tildeslash · m\/monitJan 28, 2026
- CVE-2004-189723Monitor
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Bas
MediumCVSS 5.0Proof of conceptEPSS 8%tildeslash · monitDec 31, 2004
- CVE-2003-108421Monitor
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length
MediumCVSS 5.0No exploitEPSS 3%tildeslash · monitNov 24, 2003
- CVE-2004-189921Monitor
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024
MediumCVSS 5.0No exploitEPSS 1%tildeslash · monitDec 31, 2004