Tildeslash

10 CVEs across 2 Tildeslash products. Browse Tildeslash vulnerabilities, severities, and proof-of-concept exploits.

Tildeslash products with known CVEs

ProductCVEs
Monit8
M\/monit2
Tildeslash CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-36969High8.82026-01-28M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Att…
CVE-2020-36968Medium6.52026-01-28M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API endpo…
CVE-2022-26563High8.82023-07-18An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authorization.
CVE-2019-11455High8.12019-04-22A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent me…
CVE-2019-11393Critical9.82019-04-22An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by reques…
CVE-2004-18992004-12-31The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes.
CVE-2004-18982004-12-31Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username.
CVE-2004-18972004-12-31Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication r…
CVE-2003-10832003-12-31Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
CVE-2003-10842003-11-24Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.