Tildeslash Monit vulnerabilities
7 vulnerabilities
Known vulnerabilities in Tildeslash Monit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2022-26563tildeslash · monit +2 moretildeslash monitAn issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authorization.CVSS8.8HighEPSS0.89%PrioritiseCVE-2019-11455canonical · ubuntu_linux +6 morecanonical ubuntu_linuxA buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service (application outage).CVSS8.1HighEPSS2.88%PrioritiseCVE-2019-11393tildeslash · monittildeslash monitAn issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password change and specifying the admin parameter.CVSS9.8CriticalEPSS2.09%RoutineCVE-2004-1899tildeslash · monit +1 moretildeslash monitThe administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes.CVSS5.0MediumEPSS1.69%PrioritiseCVE-2004-1898tildeslash · monit +1 moretildeslash monitStack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username.CVSS10.0CriticalEPSS16.57%RoutineCVE-2003-1084tildeslash · monit +1 moretildeslash monitMonit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.CVSS5.0MediumEPSS3.69%PrioritiseCVE-2003-1083tildeslash · monit +1 moretildeslash monitStack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.CVSS10.0CriticalEPSS21.11%