agentprime: pandora-fms

agentprime: pandora-fmsEvery new CVE for pandora-fms.https://agentprime.io/CVE-2026-75786: SQL Injection in Grafana Integration Endpoint (query.php)https://agentprime.io/advisories/CVE-2026-75786/https://agentprime.io/advisories/CVE-2026-75786/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:30:48 GMTCVECVE-2026-64950: Stored Cross-Site Scripting via Directory Name in File Manager Create Directoryhttps://agentprime.io/advisories/CVE-2026-64950/https://agentprime.io/advisories/CVE-2026-64950/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:30:09 GMTCVECVE-2026-64949: Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File Managerhttps://agentprime.io/advisories/CVE-2026-64949/https://agentprime.io/advisories/CVE-2026-64949/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:29:30 GMTCVECVE-2026-64948: Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data Disclosurehttps://agentprime.io/advisories/CVE-2026-64948/https://agentprime.io/advisories/CVE-2026-64948/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:28:33 GMTCVECVE-2026-64947: CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Managerhttps://agentprime.io/advisories/CVE-2026-64947/https://agentprime.io/advisories/CVE-2026-64947/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:27:46 GMTCVECVE-2026-64946: CSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File Managerhttps://agentprime.io/advisories/CVE-2026-64946/https://agentprime.io/advisories/CVE-2026-64946/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:26:53 GMTCVECVE-2026-34190: CSRF in Alert Command Deletionhttps://agentprime.io/advisories/CVE-2026-34190/https://agentprime.io/advisories/CVE-2026-34190/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:26:00 GMTCVECVE-2026-34189: CSRF in Event Response Deletionhttps://agentprime.io/advisories/CVE-2026-34189/https://agentprime.io/advisories/CVE-2026-34189/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 09:24:43 GMTCVECVE-2026-34187: SQL Injection in Graph Container Parameterhttps://agentprime.io/advisories/CVE-2026-34187/https://agentprime.io/advisories/CVE-2026-34187/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 15:13:28 GMTCVECVE-2026-30810: Server-Side Request Forgery in API Checker leads to Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-30810/https://agentprime.io/advisories/CVE-2026-30810/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 15:12:46 GMTCVECVE-2026-30808: Session Fixation in Authentication leads to Session Hijackinghttps://agentprime.io/advisories/CVE-2026-30808/https://agentprime.io/advisories/CVE-2026-30808/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 15:11:45 GMTCVECVE-2026-30807: Cross-Site Request Forgery on Extension Pageshttps://agentprime.io/advisories/CVE-2026-30807/https://agentprime.io/advisories/CVE-2026-30807/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 15:11:01 GMTCVECVE-2026-30805: Insecure Default Initialization in API Authentication leads to Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-30805/https://agentprime.io/advisories/CVE-2026-30805/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 15:09:57 GMTCVEcriticalCVE-2026-34188: OS Command Injection in Event Response Executionhttps://agentprime.io/advisories/CVE-2026-34188/https://agentprime.io/advisories/CVE-2026-34188/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 15:50:41 GMTCVECVE-2026-34186: SQL Injection in Custom Fields leads to Database Compromisehttps://agentprime.io/advisories/CVE-2026-34186/https://agentprime.io/advisories/CVE-2026-34186/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 15:49:55 GMTCVECVE-2026-30813: SQL Injection in Module Search leads to Database Compromisehttps://agentprime.io/advisories/CVE-2026-30813/https://agentprime.io/advisories/CVE-2026-30813/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 15:49:13 GMTCVECVE-2026-30812: Stored Cross-Site Scripting in Event Comments via Filter Bypasshttps://agentprime.io/advisories/CVE-2026-30812/https://agentprime.io/advisories/CVE-2026-30812/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 15:48:29 GMTCVECVE-2026-30811: Missing Authorization in Configuration Ajax Endpoint leads to Information Disclosurehttps://agentprime.io/advisories/CVE-2026-30811/https://agentprime.io/advisories/CVE-2026-30811/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 15:47:40 GMTCVECVE-2026-30809: OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-30809/https://agentprime.io/advisories/CVE-2026-30809/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 15:46:53 GMTCVECVE-2026-30806: OS Command Injection in Network Report leads to Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-30806/https://agentprime.io/advisories/CVE-2026-30806/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 15:45:46 GMTCVECVE-2026-30804: Unrestricted File Upload in Extension Uploader leads to Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-30804/https://agentprime.io/advisories/CVE-2026-30804/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Apr 2026 15:44:46 GMTCVECVE-2025-5306: Command Injection in Netflow pathhttps://agentprime.io/advisories/CVE-2025-5306/https://agentprime.io/advisories/CVE-2025-5306/CVSS 7.0 (High). Critical: CVSS score 7.0 (7.0 or more) and EPSS 0.36 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Jun 2025 07:48:15 GMTCVEcriticalCVE-2024-12992: Remote Code Execution leads to Command Injectionhttps://agentprime.io/advisories/CVE-2024-12992/https://agentprime.io/advisories/CVE-2024-12992/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Mar 2025 09:21:39 GMTCVECVE-2024-12971: QuickShell Authenticated Command Injectionhttps://agentprime.io/advisories/CVE-2024-12971/https://agentprime.io/advisories/CVE-2024-12971/CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.61 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Mar 2025 09:19:31 GMTCVEcriticalCVE-2024-11320: Command Injection leading to RCE via LDAP Misconfigurationhttps://agentprime.io/advisories/CVE-2024-11320/https://agentprime.io/advisories/CVE-2024-11320/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Nov 2024 10:03:08 GMTCVECVE-2024-35308: Post-auth Arbitrary File Read in the Server Plugins Sectionhttps://agentprime.io/advisories/CVE-2024-35308/https://agentprime.io/advisories/CVE-2024-35308/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Oct 2024 09:03:15 GMTCVECVE-2024-9987: SQL Injection in CSV Module Data Collectionhttps://agentprime.io/advisories/CVE-2024-9987/https://agentprime.io/advisories/CVE-2024-9987/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Oct 2024 09:00:57 GMTCVECVE-2024-35307: Argument Injection Leading to Remote Code Execution in Realtime Graph Extensionhttps://agentprime.io/advisories/CVE-2024-35307/https://agentprime.io/advisories/CVE-2024-35307/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 14:33:29 GMTCVEcriticalCVE-2024-35306: OS Command injection in Ajax PHP files through HTTP Requesthttps://agentprime.io/advisories/CVE-2024-35306/https://agentprime.io/advisories/CVE-2024-35306/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 14:30:36 GMTCVECVE-2024-35305: Unauth Time-Based SQL Injection via APIhttps://agentprime.io/advisories/CVE-2024-35305/https://agentprime.io/advisories/CVE-2024-35305/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 14:28:18 GMTCVECVE-2024-35304: System command injection through Netflow functionhttps://agentprime.io/advisories/CVE-2024-35304/https://agentprime.io/advisories/CVE-2024-35304/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Jun 2024 14:21:10 GMTCVEcriticalCVE-2023-41793: Path Traversal and Untrusted Upload Filehttps://agentprime.io/advisories/CVE-2023-41793/https://agentprime.io/advisories/CVE-2023-41793/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Mar 2024 16:34:48 GMTCVECVE-2023-44092: OS Command Injectionhttps://agentprime.io/advisories/CVE-2023-44092/https://agentprime.io/advisories/CVE-2023-44092/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Mar 2024 16:32:54 GMTCVECVE-2023-44091: Unauth Time-Based SQL Injectionhttps://agentprime.io/advisories/CVE-2023-44091/https://agentprime.io/advisories/CVE-2023-44091/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Mar 2024 16:31:38 GMTCVECVE-2023-44090: UnautH SQL Injectionhttps://agentprime.io/advisories/CVE-2023-44090/https://agentprime.io/advisories/CVE-2023-44090/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Mar 2024 16:26:12 GMTCVECVE-2023-44089: XSS in Visual Consolehttps://agentprime.io/advisories/CVE-2023-44089/https://agentprime.io/advisories/CVE-2023-44089/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Dec 2023 11:50:00 GMTCVECVE-2023-44088: SQL Injection in Visual Consolehttps://agentprime.io/advisories/CVE-2023-44088/https://agentprime.io/advisories/CVE-2023-44088/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Dec 2023 11:48:12 GMTCVECVE-2023-41815: XSS in File managerhttps://agentprime.io/advisories/CVE-2023-41815/https://agentprime.io/advisories/CVE-2023-41815/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Dec 2023 11:46:46 GMTCVECVE-2023-41814: XSS Vulnerability Messageshttps://agentprime.io/advisories/CVE-2023-41814/https://agentprime.io/advisories/CVE-2023-41814/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Dec 2023 11:45:23 GMTCVECVE-2023-41813: User notification settings editionhttps://agentprime.io/advisories/CVE-2023-41813/https://agentprime.io/advisories/CVE-2023-41813/CVSS 3.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Dec 2023 11:42:59 GMTCVECVE-2023-41812: Uploading executables via the file managerhttps://agentprime.io/advisories/CVE-2023-41812/https://agentprime.io/advisories/CVE-2023-41812/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:58:44 GMTCVECVE-2023-41811: Stored XSS Via Site News Pagehttps://agentprime.io/advisories/CVE-2023-41811/https://agentprime.io/advisories/CVE-2023-41811/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:54:41 GMTCVECVE-2023-41810: Stored XSS Via Dashboard Panelhttps://agentprime.io/advisories/CVE-2023-41810/https://agentprime.io/advisories/CVE-2023-41810/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:52:59 GMTCVECVE-2023-41808: Arbitrary File Read As Root Via GoTTY Pagehttps://agentprime.io/advisories/CVE-2023-41808/https://agentprime.io/advisories/CVE-2023-41808/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:51:17 GMTCVECVE-2023-41807: Linux Local Privilege Escalation Via GoTTY Pagehttps://agentprime.io/advisories/CVE-2023-41807/https://agentprime.io/advisories/CVE-2023-41807/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:49:41 GMTCVEcriticalCVE-2023-41806: Misassignment of privileges can cause DOS attackhttps://agentprime.io/advisories/CVE-2023-41806/https://agentprime.io/advisories/CVE-2023-41806/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:47:54 GMTCVECVE-2023-41792: Lack of Authorization and Stored XSS Via SNMP Trap Editor Pagehttps://agentprime.io/advisories/CVE-2023-41792/https://agentprime.io/advisories/CVE-2023-41792/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:45:33 GMTCVECVE-2023-41791: Lack of Authorization and Stored XSS Via Translation Abusehttps://agentprime.io/advisories/CVE-2023-41791/https://agentprime.io/advisories/CVE-2023-41791/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:41:46 GMTCVECVE-2023-41790: Traversal Path on PHP filehttps://agentprime.io/advisories/CVE-2023-41790/https://agentprime.io/advisories/CVE-2023-41790/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:38:45 GMTCVECVE-2023-41789: Unauthenticated Admin Account Takeover Via XSShttps://agentprime.io/advisories/CVE-2023-41789/https://agentprime.io/advisories/CVE-2023-41789/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Nov 2023 14:36:55 GMTCVE