Search for packages
| purl | pkg:pypi/ajenti-panel@2.0.34 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2018-109
Aliases: CVE-2018-1000080 |
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any … | There are no reported fixed by versions. |
|
PYSEC-2018-110
Aliases: CVE-2018-1000081 |
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in … | There are no reported fixed by versions. |
|
PYSEC-2018-111
Aliases: CVE-2018-1000082 |
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool … | There are no reported fixed by versions. |
|
PYSEC-2018-112
Aliases: CVE-2018-1000083 |
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition … | There are no reported fixed by versions. |
|
PYSEC-2018-113
Aliases: CVE-2018-1000126 |
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user … | There are no reported fixed by versions. |
|
PYSEC-2018-111
Aliases: CVE-2018-1000082 |
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool … | There are no reported fixed by versions. |
|
PYSEC-2018-113
Aliases: CVE-2018-1000126 |
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user … | There are no reported fixed by versions. |
|
PYSEC-2018-110
Aliases: CVE-2018-1000081 |
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in … | There are no reported fixed by versions. |
|
PYSEC-2018-109
Aliases: CVE-2018-1000080 |
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any … | There are no reported fixed by versions. |
|
PYSEC-2018-112
Aliases: CVE-2018-1000083 |
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition … | There are no reported fixed by versions. |
|
PYSEC-2026-2339
Aliases: CVE-2026-35175 GHSA-73jv-44c3-j5p2 |
Ajenti has an authorization bypass during custom package installation ### Impact An authenticated user (using the `auth_users` plugin authentication method) … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-1000082
|
Cross-Site Request Forgery (CSRF) Ajenti contains a CSRF vulnerability in the command execution panel of the tool used to manage … | |
|
CVE-2018-1000126
|
Information Exposure Ajenti contains an Information Disclosure vulnerability that can result in user and system enumeration. | |
|
CVE-2018-1000080
|
Incorrect Permission Assignment for Critical Resource Ajenti contains an Insecure Permissions vulnerability that allows normal users to download arbitrary plugins. | |
|
CVE-2018-1000081
|
Improper Input Validation Ajenti contains an Input Validation vulnerability. An attacker can freeze the server by sending a long string … | |
|
CVE-2018-1000083
|
Path Traversal Ajenti contains an Improper Error Handling vulnerability in Login JSON request that can result in a path traversal. |