cacti vulnerabilities (Ubuntu)
121 vulnerabilities.
cactiUbuntuLocal File Inclusion (RCE) in Cacti8.1 HighcactiUbuntuSQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive...6.5 MediumcactiUbuntuStored Cross-Site-Scripting on reports_admin.php device name in Cacti6.1 MediumcactiUbuntuInsecure Deserialization in Cacti4.3 MediumcactiUbuntuAuthenticated command injection in SNMP options of a Device7.2 HighcactiUbuntuOpen redirect in change password functionality in Cacti3.5 LowcactiUbuntuStored Cross-Site-Scripting on data_sources.php debug html-block in Cacti6.1 MediumcactiUbuntuUnchecked regular expressions can lead to SQL Injection and data leakage in Cacti4.6 MediumcactiUbuntuA Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti8.8 HighcactiUbuntuAuthenticated SQL injection vulnerability in reports_user.php in Cacti8.8 HighcactiUbuntuAuthenticated SQL injection vulnerability in graphs.php in Cacti8.8 HighcactiUbuntuUnauthenticated SQL Injection in graph_view.php in Cacti9.8 CriticalcactiUbuntuReflected Cross-site Scripting in graphs_new.php in Cacti6.1 MediumcactiUbuntuStored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti6.1 MediumcactiUbuntuStored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti6.1 MediumcactiUbuntuStored Cross-site Scripting on data_sources.php device name view in Cacti6.1 MediumcactiUbuntuStored Cross-site Scripting on host.php verbose data-query debug view in Cacti6.1 MediumcactiUbuntuStored Cross-site Scripting on data_debug.php datasource path view in Cacti6.1 MediumcactiUbuntuStored Cross-site Scripting on graphs.php data template formated name view in Cacti6.1 MediumcactiUbuntuA reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows...6.1 MediumcactiUbuntuIn Cacti 1.2.19, there is an authentication bypass in the web login functionality because of...5.3 MediumcactiUbuntuCross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php.6.1 MediumcactiUbuntuCacti before 1.2.6 allows IDOR (Insecure Direct Object Reference) for accessing any graph via a...7.5 HighcactiUbuntuUnauthenticated Command Injection9.8 CriticalcactiUbuntuUnder certain ldap conditions, Cacti authentication can be bypassed with certain credential types.9.8 CriticalcactiUbuntuAs an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=...6.1 MediumcactiUbuntuCacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web...5.4 MediumcactiUbuntuCacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML...5.4 MediumcactiUbuntuMultiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin...6.1 MediumcactiUbuntuCacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter...6.1 MediumcactiUbuntuAn issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in...8.8 HighcactiUbuntuA cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to...5.4 MediumcactiUbuntuA SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter...7.2 HighcactiUbuntuIn Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.6.5 MediumcactiUbuntuIn Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions...4.3 MediumcactiUbuntugraph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via...8.8 HighcactiUbuntuCacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability...6.5 MediumcactiUbuntuCacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the...8.8 HighcactiUbuntuCacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...6.1 MediumcactiUbuntuCacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization...8.1 HighcactiUbuntuIn Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph)...4.3 MediumcactiUbuntuIn clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out...5.4 MediumcactiUbuntuA cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2...5.4 MediumcactiUbuntuA cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0...4.8 MediumcactiUbuntuA cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to...4.8 MediumcactiUbuntuA cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0...4.8 MediumcactiUbuntuCacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the...5.4 MediumcactiUbuntuCacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to...5.4 MediumcactiUbuntuauth_login.php in Cacti before 1.0.0 allows remote authenticated users who use web authentication...8.8 HighcactiUbuntuCacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and...8.8 High- Show moreLoading…