artica — recent CVEs https://vulnogram.org/ Most recent CVEs assigned by artica (artica). https://vulnogram.org/seaview/icons/artica.png artica — recent CVEs https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT CVE-2021-46678 · 4 MEDIUM — Vulnerability XSS in service form name field https://vulnogram.org/CVE-2021-46678 https://vulnogram.org/CVE-2021-46678 A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the service name field. Medium Fri, 05 Aug 2022 15:26:35 GMT CVE-2021-46680 · 4 MEDIUM — Vulnerability XSS in module form name field https://vulnogram.org/CVE-2021-46680 https://vulnogram.org/CVE-2021-46680 A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field. Medium Fri, 05 Aug 2022 15:26:24 GMT CVE-2021-46677 · 4 MEDIUM — Vulnerability XSS in Event filter name field https://vulnogram.org/CVE-2021-46677 https://vulnogram.org/CVE-2021-46677 A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the event filter name field. Medium Fri, 05 Aug 2022 15:26:09 GMT CVE-2021-46676 · 4 MEDIUM — Vulnerability XSS in Transaction Map name field https://vulnogram.org/CVE-2021-46676 https://vulnogram.org/CVE-2021-46676 A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the transactional maps name field. Medium Fri, 05 Aug 2022 15:25:56 GMT CVE-2021-46679 · 4 MEDIUM — Vulnerability XSS in service elements https://vulnogram.org/CVE-2021-46679 https://vulnogram.org/CVE-2021-46679 A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements. Medium Fri, 05 Aug 2022 15:25:41 GMT CVE-2021-46681 · 4 MEDIUM — Vulnerability XSS in module mass operation name field https://vulnogram.org/CVE-2021-46681 https://vulnogram.org/CVE-2021-46681 A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via module massive operation name field. Medium Fri, 05 Aug 2022 15:25:33 GMT CVE-2022-26310 · 7.3 HIGH — Improper Authorization in User Management to Vertical Privilege Escalation https://vulnogram.org/CVE-2022-26310 https://vulnogram.org/CVE-2022-26310 Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a… High Mon, 01 Aug 2022 12:45:01 GMT CVE-2022-26309 · 3.7 LOW — Cross-Site Request en Bulk operation (User operation) https://vulnogram.org/CVE-2022-26309 https://vulnogram.org/CVE-2022-26309 Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation (User operation) resulting in elevation of privilege to Administrator group. Low Mon, 01 Aug 2022 12:44:32 GMT CVE-2022-26308 · 3.7 LOW — Improper Access Control in Configuration (Credential store) https://vulnogram.org/CVE-2022-26308 https://vulnogram.org/CVE-2022-26308 Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration (Credential store) where a user with the role of Operator (Write) could create, delete, view existing keys which are outside the intended role. Low Mon, 01 Aug 2022 12:44:04 GMT CVE-2022-0507 · 5.8 MEDIUM — Vulnerability: Authenticated SQL Injection in API https://vulnogram.org/CVE-2022-0507 https://vulnogram.org/CVE-2022-0507 Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL. Medium Wed, 09 Mar 2022 15:09:18 GMT