Every CVE whose affected-product data names Tildeslash Monit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (7)
CVE-2004-1898 — CVSS 10.0 (critical): Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via…
CVE-2003-1083 — CVSS 10.0 (critical): Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
CVE-2019-11393 — CVSS 9.8 (critical): An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an…
CVE-2022-26563 — CVSS 8.8 (high): An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper…
CVE-2019-11455 — CVSS 8.1 (high): A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the…
CVE-2004-1899 — CVSS 5.0 (medium): The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024…
CVE-2003-1084 — CVSS 5.0 (medium): Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative…