cacti vulnerabilities (Alpine)
53 vulnerabilities.
-
cactiAlpine Cacti has a SQL Injection vulnerability when using tree rules through Automation API 6.9 Medium -
cactiAlpine Cacti allows Arbitrary File Creation leading to RCE 8.7 High -
cactiAlpine Cacti has Authenticated RCE via multi-line SNMP responses 9.1 Critical -
cactiAlpine Cacti has a SQL Injection vulnerability when request automation devices 6.3 Medium -
cactiAlpine Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path 6.0 Medium -
cactiAlpine Remote code execution via Log Poisoning in Cacti 7.2 High -
cactiAlpine Stored Cross-site Scripting (XSS) when creating external links in Cacti 5.7 Medium -
cactiAlpine Stored Cross-site Scripting (XSS) when creating external links in Cacti 5.7 Medium -
cactiAlpine Stored Cross-site Scripting (XSS) when creating external links in Cacti 7.3 High -
cactiAlpine Authentication Bypass when using using older password hashes 9.1 Critical -
cactiAlpine Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database 6.5 Medium -
cactiAlpine Cacti RCE vulnerability by file include in lib/plugin.php 8.1 High -
cactiAlpine SQL Injection vulnerability in automation_get_new_graphs_sql 8.8 High -
cactiAlpine Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database 4.6 Medium -
cactiAlpine Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database 5.7 Medium -
cactiAlpine Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API 5.4 Medium -
cactiAlpine Cacti Cross-site Scripting vulnerability when managing trees 7.6 High -
cactiAlpine Cacti RCE vulnerability when importing packages 9.1 Critical -
cactiAlpine SQL Injection vulnerability when managing SNMP Notification Receivers 8.8 High -
cactiAlpine Cacti has incomplete fix for CVE-2023-39515 6.1 Medium -
cactiAlpine Cacti SQL Injection vulnerability 8.8 High -
cactiAlpine Reflected Cross Site Scripting (XSS) vulnerability in Cacti v1.2.25, allows remote attackers to... 6.1 Medium -
cactiAlpine Cacti is vulnerable to cross-Site scripting (XSS) DOM 5.4 Medium -
cactiAlpine Local File Inclusion (RCE) in Cacti 8.1 High -
cactiAlpine SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive... 6.5 Medium -
cactiAlpine Stored Cross-Site-Scripting on reports_admin.php device name in Cacti 6.1 Medium -
cactiAlpine Insecure Deserialization in Cacti 4.3 Medium -
cactiAlpine Authenticated command injection in SNMP options of a Device 7.2 High -
cactiAlpine Open redirect in change password functionality in Cacti 3.5 Low -
cactiAlpine Stored Cross-Site-Scripting on data_sources.php debug html-block in Cacti 6.1 Medium -
cactiAlpine Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti 4.6 Medium -
cactiAlpine A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti 8.8 High -
cactiAlpine Authenticated SQL injection vulnerability in reports_user.php in Cacti 8.8 High -
cactiAlpine Authenticated SQL injection vulnerability in graphs.php in Cacti 8.8 High -
cactiAlpine Unauthenticated SQL Injection in graph_view.php in Cacti 9.8 Critical -
cactiAlpine Reflected Cross-site Scripting in graphs_new.php in Cacti 6.1 Medium -
cactiAlpine Stored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti 6.1 Medium -
cactiAlpine Stored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti 6.1 Medium -
cactiAlpine Stored Cross-site Scripting on data_sources.php device name view in Cacti 6.1 Medium -
cactiAlpine Stored Cross-site Scripting on host.php verbose data-query debug view in Cacti 6.1 Medium -
cactiAlpine Stored Cross-site Scripting on data_debug.php datasource path view in Cacti 6.1 Medium -
cactiAlpine Stored Cross-site Scripting on graphs.php data template formated name view in Cacti 6.1 Medium -
cactiAlpine Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types. 9.8 Critical -
cactiAlpine An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in... 8.8 High -
cactiAlpine A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter... 7.2 High -
cactiAlpine Insufficient output escaping of attachment names in PHPMailer 7.5 High -
cactiAlpine Potential XSS vulnerability in jQuery 6.9 Medium -
cactiAlpine jQuery has a potential XSS vulnerability 6.9 Medium -
cactiAlpine graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via... 8.8 High -
cactiAlpine Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the... 8.8 High - Show olderLoading…