Pandora Fms
Approved changes feed: RSS · Atom
cpe:2.3:a:pandorafms:pandora_fms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pandorafms (6dd09729-52ac-5fa0-840b-b06085373091) |
|---|---|
| Product | Pandora Fms (97cd3d25-cd26-53e0-8e83-24b89fef581e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-34088 |
vulnerable | 2026-06-08 07:19:02.169207 |
Pandora FMS Authenticated Remote Code Execution via Ping Module
An authenticated remote code execution vulnerability exists in Pandora FMS version 7.0NG and earlier. The net_tools.php functionality allows authenticated users to execute arbitrary OS commands via the select_ips parameter when performing network tools operations, such as pinging. This occurs because user input is not properly sanitized before being passed to system commands, enabling command injection.
Published: 2025-07-03T19:46:38.590Z
Updated: 2026-07-14T22:25:43.391Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9987 |
vulnerable | 2026-06-08 07:00:29.009459 |
SQL Injection in CSV Module Data Collection
A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv functionality. This issue affects Pandora FMS: from 700 through <777.3.
Published: 2024-10-22T09:00:57.871Z
Updated: 2024-10-22T13:13:31.854Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35308 |
vulnerable | 2026-06-08 06:37:35.917000 |
Post-auth Arbitrary File Read in the Server Plugins Section
A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pandora FMS: from 700 through <777.3.
Published: 2024-10-22T09:03:15.776Z
Updated: 2024-10-22T13:11:36.744Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35304 |
vulnerable | 2026-06-08 06:37:35.908628 |
System command injection through Netflow function
System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands. This issue affects Pandora FMS: from 700 through <777.
Published: 2024-06-10T14:21:10.487Z
Updated: 2024-08-02T03:07:46.949Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11320 |
vulnerable | 2026-06-08 06:23:49.427199 |
Command Injection leading to RCE via LDAP Misconfiguration
Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through <=777.4
Published: 2024-11-21T10:03:08.739Z
Updated: 2024-11-21T14:39:13.711Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44089 |
vulnerable | 2026-06-08 06:12:38.287645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44088 |
vulnerable | 2026-06-08 06:12:38.286896 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41815 |
vulnerable | 2026-06-08 06:11:07.117413 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41814 |
vulnerable | 2026-06-08 06:11:07.117125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41813 |
vulnerable | 2026-06-08 06:11:07.116732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41793 |
vulnerable | 2026-06-08 06:11:07.089607 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2807 |
vulnerable | 2026-06-08 06:02:43.039404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24518 |
vulnerable | 2026-06-08 05:56:05.829928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24517 |
vulnerable | 2026-06-08 05:56:05.829447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24516 |
vulnerable | 2026-06-08 05:56:05.829030 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24515 |
vulnerable | 2026-06-08 05:56:05.828595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24514 |
vulnerable | 2026-06-08 05:56:05.828059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0828 |
vulnerable | 2026-06-08 05:52:32.904688 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47373 |
vulnerable | 2026-06-08 05:50:40.211614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47372 |
vulnerable | 2026-06-08 05:50:40.210997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43980 |
vulnerable | 2026-06-08 05:49:35.204769 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43979 |
vulnerable | 2026-06-08 05:49:35.204351 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43978 |
vulnerable | 2026-06-08 05:49:35.203737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2059 |
vulnerable | 2026-06-08 05:42:50.172329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2032 |
vulnerable | 2026-06-08 05:42:50.122599 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26310 |
vulnerable | 2026-06-08 05:41:50.839171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26309 |
vulnerable | 2026-06-08 05:41:50.838816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26308 |
vulnerable | 2026-06-08 05:41:50.838377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1648 |
vulnerable | 2026-06-08 05:39:13.627736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0507 |
vulnerable | 2026-06-08 05:39:10.180373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46680 |
vulnerable | 2026-06-08 05:38:03.704177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46679 |
vulnerable | 2026-06-08 05:38:03.703638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46678 |
vulnerable | 2026-06-08 05:38:03.703177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46677 |
vulnerable | 2026-06-08 05:38:03.702805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46676 |
vulnerable | 2026-06-08 05:38:03.702190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35501 |
vulnerable | 2026-06-08 05:32:48.873608 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34074 |
vulnerable | 2026-06-08 05:32:12.848655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11749 |
vulnerable | 2026-06-08 05:17:54.303019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13035 |
vulnerable | 2026-06-08 05:12:40.806920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-125115 |
vulnerable | 2026-06-08 05:05:15.864412 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.