Vulnerabilities > Tildeslash

DATE CVE VULNERABILITY TITLE RISK
2023-07-18 CVE-2022-26563 Incorrect Authorization vulnerability in Tildeslash Monit
An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authorization.
network
low complexity
tildeslash CWE-863
8.8
2019-04-22 CVE-2019-11455 Out-of-bounds Read vulnerability in multiple products
A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters.
8.1
2019-04-22 CVE-2019-11393 Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tildeslash Monit
An issue was discovered in /admin/users/update in M/Monit before 3.7.3.
network
low complexity
tildeslash CWE-640
critical
9.8