# Artica Pandora Fms


- [CVE-2010-4279](https://insights.sbomify.com/CVE-2010-4279/): Auth bypass in n/a (critical 10.0)
- [CVE-2021-32098](https://insights.sbomify.com/CVE-2021-32098/): Deserialization in n/a (critical 9.8)
- [CVE-2021-32099](https://insights.sbomify.com/CVE-2021-32099/): SQL injection in n/a (critical 9.8)
- [CVE-2020-26518](https://insights.sbomify.com/CVE-2020-26518/): SQL injection in n/a (critical 9.8)
- [CVE-2018-11221](https://insights.sbomify.com/CVE-2018-11221/): File upload in n/a (critical 9.8)
- [CVE-2024-35307](https://insights.sbomify.com/CVE-2024-35307/): Argument Injection Leading to Remote Code Execution in Realtime Graph Extension (critical 9.4)
- [CVE-2024-35304](https://insights.sbomify.com/CVE-2024-35304/): System command injection through Netflow function (critical 9.3)
- [CVE-2026-30805](https://insights.sbomify.com/CVE-2026-30805/): Insecure Default Initialization in API Authentication leads to Authentication Bypass (critical 9.1)
- [CVE-2023-41807](https://insights.sbomify.com/CVE-2023-41807/): Linux Local Privilege Escalation Via GoTTY Page (critical 9.1)
- [CVE-2010-4278](https://insights.sbomify.com/CVE-2010-4278/): Command injection in n/a (critical 9.0)
- [CVE-2024-35305](https://insights.sbomify.com/CVE-2024-35305/): Unauth Time-Based SQL Injection via API (high 8.9)
- [CVE-2019-20224](https://insights.sbomify.com/CVE-2019-20224/): Command injection in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/artica/pandora-fms/