cacti vulnerabilities (Debian)
180 vulnerabilities.
cactiDebianSQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive...6.5 MediumcactiDebianStored Cross-Site-Scripting on reports_admin.php device name in Cacti6.1 MediumcactiDebianInsecure Deserialization in Cacti4.3 MediumcactiDebianAuthenticated command injection in SNMP options of a Device7.2 HighcactiDebianOpen redirect in change password functionality in Cacti3.5 LowcactiDebianStored Cross-Site-Scripting on data_sources.php debug html-block in Cacti6.1 MediumcactiDebianUnchecked regular expressions can lead to SQL Injection and data leakage in Cacti4.6 MediumcactiDebianA Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti8.8 HighcactiDebianAuthenticated SQL injection vulnerability in reports_user.php in Cacti8.8 HighcactiDebianAuthenticated SQL injection vulnerability in graphs.php in Cacti8.8 HighcactiDebianUnauthenticated SQL Injection in graph_view.php in Cacti9.8 CriticalcactiDebianReflected Cross-site Scripting in graphs_new.php in Cacti6.1 MediumcactiDebianStored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti6.1 MediumcactiDebianStored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti6.1 MediumcactiDebianStored Cross-site Scripting on data_sources.php device name view in Cacti6.1 MediumcactiDebianStored Cross-site Scripting on host.php verbose data-query debug view in Cacti6.1 MediumcactiDebianStored Cross-site Scripting on data_debug.php datasource path view in Cacti6.1 MediumcactiDebianStored Cross-site Scripting on graphs.php data template formated name view in Cacti6.1 MediumcactiDebianA reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows...6.1 MediumcactiDebianIn Cacti 1.2.19, there is an authentication bypass in the web login functionality because of...5.3 MediumcactiDebianCross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php.6.1 MediumcactiDebianCacti before 1.2.6 allows IDOR (Insecure Direct Object Reference) for accessing any graph via a...7.5 HighcactiDebianUnauthenticated Command Injection9.8 CriticalcactiDebianUnder certain ldap conditions, Cacti authentication can be bypassed with certain credential types.9.8 CriticalcactiDebianAs an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=...6.1 MediumcactiDebianCacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web...5.4 MediumcactiDebianCacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML...5.4 MediumcactiDebianMultiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin...6.1 MediumcactiDebianCacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter...6.1 MediumcactiDebianAn issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in...8.8 HighcactiDebianA cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to...5.4 MediumcactiDebianA SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter...7.2 HighcactiDebianIn Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.6.5 MediumcactiDebianIn Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions...4.3 MediumcactiDebiangraph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via...8.8 HighcactiDebianCacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability...6.5 MediumcactiDebianCacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the...8.8 HighcactiDebianCacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...6.1 MediumcactiDebian** DISPUTED ** data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input...8.8 HighcactiDebianCacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization...8.1 HighcactiDebianIn Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph)...4.3 MediumcactiDebianDOMPurify nesting-based mXSS10.0 CriticalcactiDebianIn clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out...5.4 MediumcactiDebianA cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2...5.4 MediumcactiDebianA cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0...4.8 MediumcactiDebianA cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to...4.8 MediumcactiDebianA cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0...4.8 MediumcactiDebianCacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the...5.4 MediumcactiDebianCacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to...5.4 MediumcactiDebianCacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on ...5.4 Medium- Show moreLoading…