cacti-spine vulnerabilities (SUSE)
53 vulnerabilities.
cacti-spineSUSEAuthentication Bypass when using using older password hashes9.1 Criticalcacti-spineSUSECacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database6.5 Mediumcacti-spineSUSECacti RCE vulnerability by file include in lib/plugin.php8.1 Highcacti-spineSUSECacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database4.6 Mediumcacti-spineSUSESQL Injection vulnerability in automation_get_new_graphs_sql8.8 Highcacti-spineSUSECacti XSS vulnerability in lib/html.php by reading dirty data stored in database4.6 Mediumcacti-spineSUSECacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database5.7 Mediumcacti-spineSUSECacti Cross-site Scripting vulnerability when using JavaScript based messaging API5.4 Mediumcacti-spineSUSECacti Cross-site Scripting vulnerability when managing trees7.6 Highcacti-spineSUSECacti RCE vulnerability when importing packages9.1 Criticalcacti-spineSUSESQL Injection vulnerability when managing SNMP Notification Receivers8.8 Highcacti-spineSUSECross-Site Scripting vulnerability when Import xml template file5.4 Mediumcacti-spineSUSECacti has incomplete fix for CVE-2023-395156.1 Mediumcacti-spineSUSECacti SQL Injection vulnerability8.8 Highcacti-spineSUSECacti is vulnerable to cross-Site scripting (XSS) DOM5.4 Mediumcacti-spineSUSELocal File Inclusion (RCE) in Cacti8.1 Highcacti-spineSUSEStored Cross-Site-Scripting on reports_admin.php device name in Cacti6.1 Mediumcacti-spineSUSEInsecure Deserialization in Cacti4.3 Mediumcacti-spineSUSEAuthenticated command injection in SNMP options of a Device7.2 Highcacti-spineSUSEOpen redirect in change password functionality in Cacti3.5 Lowcacti-spineSUSEStored Cross-Site-Scripting on data_sources.php debug html-block in Cacti6.1 Mediumcacti-spineSUSEUnchecked regular expressions can lead to SQL Injection and data leakage in Cacti4.6 Mediumcacti-spineSUSEA Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti8.8 Highcacti-spineSUSEAuthenticated SQL injection vulnerability in reports_user.php in Cacti8.8 Highcacti-spineSUSEAuthenticated SQL injection vulnerability in graphs.php in Cacti8.8 Highcacti-spineSUSEUnauthenticated SQL Injection in graph_view.php in Cacti9.8 Criticalcacti-spineSUSEReflected Cross-site Scripting in graphs_new.php in Cacti6.1 Mediumcacti-spineSUSEStored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti6.1 Mediumcacti-spineSUSEStored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti6.1 Mediumcacti-spineSUSEStored Cross-site Scripting on data_sources.php device name view in Cacti6.1 Mediumcacti-spineSUSEStored Cross-site Scripting on host.php verbose data-query debug view in Cacti6.1 Mediumcacti-spineSUSEStored Cross-site Scripting on data_debug.php datasource path view in Cacti6.1 Mediumcacti-spineSUSEStored Cross-site Scripting on graphs.php data template formated name view in Cacti6.1 Mediumcacti-spineSUSEUnauthenticated Command Injection9.8 Criticalcacti-spineSUSESecurity update for cacti, cacti-spineNo scorecacti-spineSUSEUnder certain ldap conditions, Cacti authentication can be bypassed with certain credential types.9.8 Criticalcacti-spineSUSECacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter...6.1 Mediumcacti-spineSUSEAn issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in...8.8 Highcacti-spineSUSEA SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter...7.2 Highcacti-spineSUSEInsufficient output escaping of attachment names in PHPMailer7.5 Highcacti-spineSUSEPotential XSS vulnerability in jQuery6.9 Mediumcacti-spineSUSEjQuery has a potential XSS vulnerability6.9 Mediumcacti-spineSUSEgraph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via...8.8 Highcacti-spineSUSECacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability...6.5 Mediumcacti-spineSUSECacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the...8.8 Highcacti-spineSUSECacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...6.1 Mediumcacti-spineSUSECacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization...8.1 Highcacti-spineSUSEIn Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph)...4.3 Mediumcacti-spineSUSEA cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2...5.4 Mediumcacti-spineSUSEA cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0...4.8 Medium- Show olderLoading…