pandora

5 results · Feed

• Medium 6.1
  CVE-2022-45436 Public exploit

  Stored cross-site scripting vulnerability in network maps editor feature

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all platforms, allows Cross-Site Scripting (XSS). As a manager privilege user , create a network map containing name as xss p…

  Artica PFMS Pandora FMS pandora Ubuntu
  Feb 15, 2023
• Medium 6.5
  CVE-2022-45437

  Stored cross-site scripting vulnerability in the reporting dashboard module

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting (XSS). A user with edition privileges can create a Payload in the reporting dashboard module.…

  Artica PFMS Pandora FMS pandora Ubuntu
  Feb 15, 2023
• Medium 6.4
  CVE-2022-47373 Public exploit

  Reflected Cross Site Scripting in Search Functionality of Module Library

  Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus resul…

  Artica PFMS Pandora FMS pandora Ubuntu
  Feb 15, 2023
• High 7.6
  CVE-2022-47372

  Stored cross-site scripting vulnerability in create event section

  Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them in…

  Artica PFMS Pandora FMS pandora Ubuntu
  Feb 15, 2023
• Medium 6.5
  CVE-2023-22898

  workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submit…

  pandora Ubuntu
  Jan 10, 2023