cacti vulnerabilities (SUSE)
53 vulnerabilities.
-
cactiSUSE Authentication Bypass when using using older password hashes 9.1 Critical -
cactiSUSE Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database 6.5 Medium -
cactiSUSE Cacti RCE vulnerability by file include in lib/plugin.php 8.1 High -
cactiSUSE Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database 4.6 Medium -
cactiSUSE SQL Injection vulnerability in automation_get_new_graphs_sql 8.8 High -
cactiSUSE Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database 4.6 Medium -
cactiSUSE Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database 5.7 Medium -
cactiSUSE Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API 5.4 Medium -
cactiSUSE Cacti Cross-site Scripting vulnerability when managing trees 7.6 High -
cactiSUSE Cacti RCE vulnerability when importing packages 9.1 Critical -
cactiSUSE SQL Injection vulnerability when managing SNMP Notification Receivers 8.8 High -
cactiSUSE Cross-Site Scripting vulnerability when Import xml template file 5.4 Medium -
cactiSUSE Cacti has incomplete fix for CVE-2023-39515 6.1 Medium -
cactiSUSE Cacti SQL Injection vulnerability 8.8 High -
cactiSUSE Cacti is vulnerable to cross-Site scripting (XSS) DOM 5.4 Medium -
cactiSUSE Local File Inclusion (RCE) in Cacti 8.1 High -
cactiSUSE Stored Cross-Site-Scripting on reports_admin.php device name in Cacti 6.1 Medium -
cactiSUSE Insecure Deserialization in Cacti 4.3 Medium -
cactiSUSE Authenticated command injection in SNMP options of a Device 7.2 High -
cactiSUSE Open redirect in change password functionality in Cacti 3.5 Low -
cactiSUSE Stored Cross-Site-Scripting on data_sources.php debug html-block in Cacti 6.1 Medium -
cactiSUSE Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti 4.6 Medium -
cactiSUSE A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti 8.8 High -
cactiSUSE Authenticated SQL injection vulnerability in reports_user.php in Cacti 8.8 High -
cactiSUSE Authenticated SQL injection vulnerability in graphs.php in Cacti 8.8 High -
cactiSUSE Unauthenticated SQL Injection in graph_view.php in Cacti 9.8 Critical -
cactiSUSE Reflected Cross-site Scripting in graphs_new.php in Cacti 6.1 Medium -
cactiSUSE Stored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti 6.1 Medium -
cactiSUSE Stored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti 6.1 Medium -
cactiSUSE Stored Cross-site Scripting on data_sources.php device name view in Cacti 6.1 Medium -
cactiSUSE Stored Cross-site Scripting on host.php verbose data-query debug view in Cacti 6.1 Medium -
cactiSUSE Stored Cross-site Scripting on data_debug.php datasource path view in Cacti 6.1 Medium -
cactiSUSE Stored Cross-site Scripting on graphs.php data template formated name view in Cacti 6.1 Medium -
cactiSUSE Unauthenticated Command Injection 9.8 Critical -
cactiSUSE Security update for cacti, cacti-spine No score -
cactiSUSE Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types. 9.8 Critical -
cactiSUSE Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter... 6.1 Medium -
cactiSUSE An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in... 8.8 High -
cactiSUSE A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter... 7.2 High -
cactiSUSE Insufficient output escaping of attachment names in PHPMailer 7.5 High -
cactiSUSE Potential XSS vulnerability in jQuery 6.9 Medium -
cactiSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
cactiSUSE graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via... 8.8 High -
cactiSUSE Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability... 6.5 Medium -
cactiSUSE Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the... 8.8 High -
cactiSUSE Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items... 6.1 Medium -
cactiSUSE Cacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization... 8.1 High -
cactiSUSE In Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph)... 4.3 Medium -
cactiSUSE A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2... 5.4 Medium -
cactiSUSE A cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0... 4.8 Medium - Show olderLoading…