CVE-2026-33739

< 1.5.10.1812

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1812, the listing tables on mu

5.7MEDIUM

CVE-2025-58443

<= 1.5.10.1673

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an auth

9.1CRITICAL

CVE-2024-42349

< 1.5.10.47

FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.4 and earlier can leak authorized and reje

5.3MEDIUM

CVE-2024-42348

>= 1.5.10.41 and < 1.5.10.41.3

FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when r

9.3CRITICAL

CVE-2024-41954

>= 1.5.10 and <= 1.5.10.41

FOG is a cloning/imaging/rescue suite/inventory management system. The application stores plaintext service account credentials in

5.3MEDIUM

CVE-2024-41108

>= 1.5.10 and < 1.5.10.41

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improper access

7.5HIGH

CVE-2024-40645

>= 1.5.10 and <= 1.5.10.41

FOG is a cloning/imaging/rescue suite/inventory management system. An improperly restricted file upload feature allows authenticat

8.8HIGH

CVE-2024-39916

<= 1.5.10

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. There is a security issue with the NFS configu

6.4MEDIUM

CVE-2024-39914

< 1.5.10.41

FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php

9.8CRITICAL

CVE-2024-34477

< 1.5.10.41

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS shar

7.8HIGH

CVE-2023-46237

< 1.5.10

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, an endpoint intended

5.8MEDIUM

CVE-2023-46236

< 1.5.10

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, a server-side-request

8.6HIGH

CVE-2023-46235

< 1.5.10.15

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10.15, due to a lack of r

5.4MEDIUM

CVE-2021-32243

all versions

FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated).

8.8HIGH

CVE-2014-3111

all versions

Multiple cross-site scripting (XSS) vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary