İçeriğe atla
Noroxi

artica kayıtları

artica üreticisine ait 74 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %4,1
Pre-auth RCE
6
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

74 kayıt
  • CVE-2010-4279
    60Bu hafta

    The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attacker

    KritikCVSS 10,0SilahlaştırılmışEPSS %66

    artica · pandora fms2 Ara 2010

  • CVE-2024-12971
    52Planlayın

    QuickShell Authenticated Command Injection

    YüksekCVSS 8,6SilahlaştırılmışEPSS %61

    artica · pandora fms17 Mar 2025

  • CVE-2019-20224
    50Planlayın

    netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell

    YüksekCVSS 8,8Kavram kanıtıEPSS %50

    artica · pandora fms9 Oca 2020

  • CVE-2021-32099
    43Planlayın

    A SQL injection vulnerability in the pandora_console component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his u

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    artica · pandora fms7 May 2021

  • CVE-2018-11221
    41Planlayın

    Unauthenticated untrusted file upload in Artica Pandora FMS through version 7.23 allows an attacker to upload an arbitrary plugin via includ

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    artica · pandora fms15 Haz 2018

  • CVE-2021-32098
    40Planlayın

    Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization.

    KritikCVSS 9,8İstismar yokEPSS %2

    artica · pandora fms7 May 2021

  • CVE-2021-3832
    40Planlayın

    Integria IMS Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %2

    artica · integria ims7 Eki 2021

  • CVE-2020-26518
    40Planlayın

    Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora_console/include/chart_genera

    KritikCVSS 9,8İstismar yokEPSS %2

    artica · pandora fms2 Eki 2020

  • CVE-2025-5306
    39İzleyin

    Command Injection in Netflow path

    YüksekCVSS 7,0SilahlaştırılmışEPSS %36

    artica · pandora fms27 Haz 2025

  • CVE-2010-4278
    39İzleyin

    operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metac

    KritikCVSS 9,0Kavram kanıtıEPSS %11

    artica · pandora fms2 Ara 2010

  • CVE-2019-15091
    39İzleyin

    filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload.

    KritikCVSS 9,8İstismar yokEPSS %2

    artica · integria ims16 Ağu 2019

  • CVE-2021-3833
    39İzleyin

    Integria IMS incorrect authorization

    KritikCVSS 9,8İstismar yokEPSS %1

    artica · integria ims7 Eki 2021

  • CVE-2023-41790
    39İzleyin

    Traversal Path on PHP file

    KritikCVSS 9,8İstismar yokEPSS %1

    artica · pandora fms23 Kas 2023

  • CVE-2023-4677
    39İzleyin

    Unauthenticated Admin Account Takeover Via Cron Log File Backups

    KritikCVSS 9,8İstismar yokEPSS %0

    artica · pandora fms23 Kas 2023

  • CVE-2023-44091
    39İzleyin

    Unauth Time-Based SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %0

    artica · pandora fms19 Mar 2024

  • CVE-2020-5844
    37İzleyin

    index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious P

    YüksekCVSS 7,2Kavram kanıtıEPSS %30

    artica · pandora fms16 Mar 2020

  • CVE-2024-35304
    37İzleyin

    System command injection through Netflow function

    KritikCVSS 9,3İstismar yokEPSS %1

    artica · pandora fms10 Haz 2024

  • CVE-2024-35307
    37İzleyin

    Argument Injection Leading to Remote Code Execution in Realtime Graph Extension

    KritikCVSS 9,4İstismar yokEPSS %1

    artica · pandora fms10 Haz 2024

  • CVE-2010-4282
    36İzleyin

    Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    artica · pandora fms2 Ara 2010

  • CVE-2019-19681
    36İzleyin

    Pandora FMS 7.x suffers from remote code execution vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %5

    artica · pandora fms26 Ara 2019

  • CVE-2023-44092
    36İzleyin

    OS Command Injection

    KritikCVSS 9,1İstismar yokEPSS %1

    artica · pandora fms19 Mar 2024

  • CVE-2026-30805
    36İzleyin

    Insecure Default Initialization in API Authentication leads to Authentication Bypass

    KritikCVSS 9,1İstismar yokEPSS %0

    artica · pandora fms12 May 2026

  • CVE-2020-8947
    35İzleyin

    functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the ind

    YüksekCVSS 7,2Kavram kanıtıEPSS %22

    artica · pandora fms12 Şub 2020

  • CVE-2023-41807
    35İzleyin

    Linux Local Privilege Escalation Via GoTTY Page

    YüksekCVSS 8,8İstismar yokEPSS %1

    artica · pandora fms23 Kas 2023

  • CVE-2023-41788
    35İzleyin

    Remote Code Execution via File Uploader

    YüksekCVSS 8,8İstismar yokEPSS %1

    artica · pandora fms23 Kas 2023