cacti vulnerabilities (Debian)
180 vulnerabilities.
-
cactiDebian Cacti: User Enumeration via Error Messages 5.3 Medium -
cactiDebian Cacti: Authenticated RCE on Data Input 7.2 High -
cactiDebian Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368) 5.5 Medium -
cactiDebian Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection 8.8 High -
cactiDebian Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages 7.1 High -
cactiDebian Cacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter 6.5 Medium -
cactiDebian Cacti: SQL Injection in managers.php 7.2 High -
cactiDebian Cacti: Session Fixation via missing session_regenerate_id() after login 5.4 Medium -
cactiDebian Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect 6.1 Medium -
cactiDebian Cacti: Command Injection via escape_command() no-op in RRDtool execution 8.6 High -
cactiDebian Cacti: Stored SQL Injection via graph_name_regexp in Reports feature 7.6 High -
cactiDebian Cacti has SQL Injection via rfilter parameter in RLIKE clauses 9.3 Critical -
cactiDebian Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php 9.8 Critical -
cactiDebian Cacti: Unauthenticated RCE on Graph Image 9.8 Critical -
cactiDebian Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context 5.3 Medium -
cactiDebian Cacti: Path Traversal via filename parameter in package_import.php 6.9 Medium -
cactiDebian Cacti has a Reflected XSS Vulnerability via html_auth_footer 5.3 Medium -
cactiDebian Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formatting 2.9 Low -
cactiDebian Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php 9.8 Critical -
cactiDebian A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a... 5.4 Medium -
cactiDebian SNMP Command Injection leads to RCE in Cacti 7.4 High -
cactiDebian Cacti graph_view.php RCE via graph_start Parameter Injection 8.7 High -
cactiDebian Cacti through 1.2.29 allows SQL injection in the template function in host_templates.php via the... 7.6 High -
cactiDebian Cacti has a SQL Injection vulnerability when using tree rules through Automation API 6.9 Medium -
cactiDebian Cacti allows Arbitrary File Creation leading to RCE 8.7 High -
cactiDebian Cacti has Authenticated RCE via multi-line SNMP responses 9.1 Critical -
cactiDebian Cacti has a SQL Injection vulnerability when request automation devices 6.3 Medium -
cactiDebian Cacti has a SQL Injection vulnerability when view host template 7.6 High -
cactiDebian Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path 6.0 Medium -
cactiDebian DOMPurify vulnerable to tampering by prototype polution 9.1 Critical -
cactiDebian Remote code execution via Log Poisoning in Cacti 7.2 High -
cactiDebian Stored Cross-site Scripting (XSS) when creating external links in Cacti 5.7 Medium -
cactiDebian Stored Cross-site Scripting (XSS) when creating external links in Cacti 5.7 Medium -
cactiDebian Stored Cross-site Scripting (XSS) when creating external links in Cacti 7.3 High -
cactiDebian Authentication Bypass when using using older password hashes 9.1 Critical -
cactiDebian Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database 6.5 Medium -
cactiDebian Cacti RCE vulnerability by file include in lib/plugin.php 8.1 High -
cactiDebian Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database 4.6 Medium -
cactiDebian SQL Injection vulnerability in automation_get_new_graphs_sql 8.8 High -
cactiDebian Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database 4.6 Medium -
cactiDebian Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database 5.7 Medium -
cactiDebian Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API 5.4 Medium -
cactiDebian Cacti Cross-site Scripting vulnerability when managing trees 7.6 High -
cactiDebian Cacti RCE vulnerability when importing packages 9.1 Critical -
cactiDebian SQL Injection vulnerability when managing SNMP Notification Receivers 8.8 High -
cactiDebian Cross-Site Scripting vulnerability when Import xml template file 5.4 Medium -
cactiDebian Cacti has incomplete fix for CVE-2023-39515 6.1 Medium -
cactiDebian Cacti SQL Injection vulnerability 8.8 High -
cactiDebian Cacti is vulnerable to cross-Site scripting (XSS) DOM 5.4 Medium -
cactiDebian Local File Inclusion (RCE) in Cacti 8.1 High - Show olderLoading…