cacti vulnerabilities (Ubuntu)
121 vulnerabilities.
-
cactiUbuntu Cacti: User Enumeration via Error Messages 5.3 Medium -
cactiUbuntu Cacti: Authenticated RCE on Data Input 7.2 High -
cactiUbuntu Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368) 5.5 Medium -
cactiUbuntu Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection 8.8 High -
cactiUbuntu Cacti: Package Import Signature Validation Bypass Allows Self-Signed Packages 7.1 High -
cactiUbuntu Cacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter 6.5 Medium -
cactiUbuntu Cacti: SQL Injection in managers.php 7.2 High -
cactiUbuntu Cacti: Session Fixation via missing session_regenerate_id() after login 5.4 Medium -
cactiUbuntu Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect 6.1 Medium -
cactiUbuntu Cacti: Command Injection via escape_command() no-op in RRDtool execution 8.6 High -
cactiUbuntu Cacti: Stored SQL Injection via graph_name_regexp in Reports feature 7.6 High -
cactiUbuntu Cacti has SQL Injection via rfilter parameter in RLIKE clauses 9.3 Critical -
cactiUbuntu Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php 9.8 Critical -
cactiUbuntu Cacti: Unauthenticated RCE on Graph Image 9.8 Critical -
cactiUbuntu Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context 5.3 Medium -
cactiUbuntu Cacti: Path Traversal via filename parameter in package_import.php 6.9 Medium -
cactiUbuntu Cacti has a Reflected XSS Vulnerability via html_auth_footer 5.3 Medium -
cactiUbuntu Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formatting 2.9 Low -
cactiUbuntu Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php 9.8 Critical -
cactiUbuntu A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a... 5.4 Medium -
cactiUbuntu SNMP Command Injection leads to RCE in Cacti 7.4 High -
cactiUbuntu billboard.js allows prototype pollution via the function generate 9.8 Critical -
cactiUbuntu Cacti through 1.2.29 allows SQL injection in the template function in host_templates.php via the... 7.6 High -
cactiUbuntu Cacti has a SQL Injection vulnerability when using tree rules through Automation API 6.9 Medium -
cactiUbuntu Cacti allows Arbitrary File Creation leading to RCE 8.7 High -
cactiUbuntu Cacti has Authenticated RCE via multi-line SNMP responses 9.1 Critical -
cactiUbuntu Cacti has a SQL Injection vulnerability when request automation devices 6.3 Medium -
cactiUbuntu Cacti has a SQL Injection vulnerability when view host template 7.6 High -
cactiUbuntu Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path 6.0 Medium -
cactiUbuntu Remote code execution via Log Poisoning in Cacti 7.2 High -
cactiUbuntu Stored Cross-site Scripting (XSS) when creating external links in Cacti 5.7 Medium -
cactiUbuntu Stored Cross-site Scripting (XSS) when creating external links in Cacti 5.7 Medium -
cactiUbuntu Stored Cross-site Scripting (XSS) when creating external links in Cacti 7.3 High -
cactiUbuntu Authentication Bypass when using using older password hashes 9.1 Critical -
cactiUbuntu Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database 6.5 Medium -
cactiUbuntu Cacti RCE vulnerability by file include in lib/plugin.php 8.1 High -
cactiUbuntu Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database 4.6 Medium -
cactiUbuntu SQL Injection vulnerability in automation_get_new_graphs_sql 8.8 High -
cactiUbuntu Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database 4.6 Medium -
cactiUbuntu Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database 5.7 Medium -
cactiUbuntu Cacti XSS vulnerability in display_settings 6.1 Medium -
cactiUbuntu Cacti command injection in cmd_realtime.php 10.0 Critical -
cactiUbuntu Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API 5.4 Medium -
cactiUbuntu Cacti Cross-site Scripting vulnerability when managing trees 7.6 High -
cactiUbuntu Cacti RCE vulnerability when importing packages 9.1 Critical -
cactiUbuntu SQL Injection vulnerability when managing SNMP Notification Receivers 8.8 High -
cactiUbuntu Cross-Site Scripting vulnerability when Import xml template file 5.4 Medium -
cactiUbuntu Cacti has incomplete fix for CVE-2023-39515 6.1 Medium -
cactiUbuntu Cacti SQL Injection vulnerability 8.8 High -
cactiUbuntu Cacti is vulnerable to cross-Site scripting (XSS) DOM 5.4 Medium - Show olderLoading…