Approved changes feed: RSS · Atom

cpe:2.3:a:artica:pandora_fms:7.0_ng:*:*:*:*:*:*:*

part: a version: 7.0_ng update: *

VendorArtica (0f19f399-0cbf-52c8-988a-49f1b199888b)
ProductPandora Fms (0c868f8a-993f-5736-ba6f-b4e66c866cc4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/pandorafms/pandorafms purl2cpe 2026-06-01 10:13:11.721427
pkg:github/pandorafms/pandorafms purl2cpe 2026-06-01 10:13:11.721429

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5844 vulnerable 2026-06-08 05:26:43.962627 Details available
index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742_FIX_PERL2020.
Published: 2020-03-16T17:22:05.000Z
Updated: 2024-08-04T08:39:25.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20224 vulnerable 2026-06-08 05:13:30.608436 Details available
netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?operation/netflow/nf_live_view request. This issue has been fixed in Pandora FMS 7.0 NG 742.
Published: 2020-01-09T15:37:58.000Z
Updated: 2024-08-05T02:39:09.204Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.