monstra monstra

Name: monstra monstra
Brand: monstra

productUS

cpe:2.3:a:monstra:monstra:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical11high20medium0low

updated 2026-10-28

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-18048US	high8.8	63.4% (99th)	Exploit	no fix	2018-01-23	= 3.0.4
CVE-2018-6383US	high8.8	13.5% (96th)	Exploit	no fix	2018-01-29	≤ 3.0.4
CVE-2018-9038US	medium6.5	9.30% (95th)	Exploit	no fix	2018-04-10	= 3.0.4
CVE-2018-17418US	high7.2	3.07% (88th)	Exploit	no fix	2019-03-07	= 3.0.4
CVE-2018-10118US	medium4.8	2.74% (86th)	Exploit	no fix	2018-04-16	= 3.0.4
CVE-2018-10109US	medium4.8	2.08% (81st)	Exploit	no fix	2018-04-16	= 3.0.4
CVE-2024-36774US	high7.2	0.72% (54th)	Exploit	no fix	2024-06-06	= 3.0.4
CVE-2021-36548US	critical9.8	3.31% (88th)	—	no fix	2021-10-28	= 3.0.4
CVE-2018-16979US	medium6.1	3.02% (87th)	—	no fix	2018-09-12	= 3.0.4
CVE-2018-9037US	high8.8	2.82% (87th)	—	no fix	2018-04-10	= 3.0.4
CVE-2020-13384US	high8.8	2.50% (85th)	—	no fix	2020-05-22	= 3.0.4
CVE-2018-11473US	medium6.1	2.24% (83rd)	—	no fix	2018-05-25	= 3.0.4
CVE-2020-25414US	critical9.8	2.03% (81st)	—	no fix	2021-06-17	= 3.0.4
CVE-2018-16820US	high7.5	1.97% (80th)	—	no fix	2018-09-18	= 3.0.4
CVE-2018-14922US	medium6.1	1.95% (80th)	—	no fix	2018-08-14	= 3.0.4
CVE-2018-15886US	high7.2	1.65% (76th)	—	no fix	2018-09-10	= 3.0.4
CVE-2021-40940US	critical9.8	1.63% (76th)	—	no fix	2022-06-15	≤ 3.0.4
CVE-2020-8439US	medium6.5	1.59% (76th)	—	no fix	2020-03-07	≤ 3.0.4
CVE-2014-9006US	medium5.0	1.58% (75th)	—	no fix	2014-11-20	≤ 3.0.1
CVE-2018-16819US	medium4.9	1.34% (71st)	—	no fix	2018-09-18	= 3.0.4
CVE-2018-16977US	medium5.3	1.21% (68th)	—	no fix	2018-09-12	= 3.0.4
CVE-2018-16608US	high8.8	1.20% (68th)	—	no fix	2018-09-10	= 3.0.4
CVE-2018-11475US	high8.0	1.06% (64th)	—	no fix	2018-05-25	= 3.0.4
CVE-2018-11474US	high8.0	1.06% (64th)	—	no fix	2018-05-25	= 3.0.4
CVE-2018-11472US	medium6.1	0.92% (60th)	—	no fix	2018-05-25	= 3.0.4
CVE-2018-17025US	medium6.1	0.90% (59th)	—	no fix	2018-09-13	= 3.0.4
CVE-2018-18694US	medium4.8	0.89% (59th)	—	no fix	2018-10-29	= 3.0.4
CVE-2018-16978US	medium6.1	0.85% (58th)	—	no fix	2018-09-12	= 3.0.4
CVE-2018-6550US	medium5.4	0.72% (54th)	—	no fix	2018-02-02	≤ 3.0.4
CVE-2018-17024US	medium4.8	0.71% (53rd)	—	no fix	2018-09-13	= 3.0.4
CVE-2018-17026US	medium4.8	0.70% (53rd)	—	no fix	2018-09-13	= 3.0.4
CVE-2018-10121US	medium4.8	0.66% (51st)	—	no fix	2018-04-16	= 3.0.4
CVE-2024-36773US	medium4.8	0.37% (30th)	—	no fix	2024-06-07	≤ 3.0.4
CVE-2024-36775US	medium5.4	0.33% (26th)	—	no fix	2024-06-06	= 3.0.4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')14 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type7 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-384Session Fixation2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
CWE-184Incomplete List of Disallowed Inputs1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-255CWE-2551 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan