cacti vulnerabilities (openSUSE)
90 vulnerabilities.
-
cactiopenSUSE DOMPurify XSS via Missing Rawtext Elements in SAFE_FOR_XML 5.3 Medium -
cactiopenSUSE cacti-1.2.30+git231.bca15e70c-1.1 on GA media No score -
cactiopenSUSE billboard.js is vulnerable to XSS during chart option binding 6.1 Medium -
cactiopenSUSE Authentication Bypass when using using older password hashes 9.1 Critical -
cactiopenSUSE Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database 6.5 Medium -
cactiopenSUSE Cacti RCE vulnerability by file include in lib/plugin.php 8.1 High -
cactiopenSUSE Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database 4.6 Medium -
cactiopenSUSE SQL Injection vulnerability in automation_get_new_graphs_sql 8.8 High -
cactiopenSUSE Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database 4.6 Medium -
cactiopenSUSE Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database 5.7 Medium -
cactiopenSUSE Cacti Cross-site Scripting vulnerability when using JavaScript based messaging API 5.4 Medium -
cactiopenSUSE Cacti Cross-site Scripting vulnerability when managing trees 7.6 High -
cactiopenSUSE Cacti RCE vulnerability when importing packages 9.1 Critical -
cactiopenSUSE phpseclib guardrails needed on OID length 7.5 High -
cactiopenSUSE SQL Injection vulnerability when managing SNMP Notification Receivers 8.8 High -
cactiopenSUSE Cross-Site Scripting vulnerability when Import xml template file 5.4 Medium -
cactiopenSUSE Cacti has incomplete fix for CVE-2023-39515 6.1 Medium -
cactiopenSUSE Cacti SQL Injection vulnerability 8.8 High -
cactiopenSUSE Cacti is vulnerable to cross-Site scripting (XSS) DOM 5.4 Medium -
cactiopenSUSE Local File Inclusion (RCE) in Cacti 8.1 High -
cactiopenSUSE Stored Cross-Site-Scripting on reports_admin.php device name in Cacti 6.1 Medium -
cactiopenSUSE Insecure Deserialization in Cacti 4.3 Medium -
cactiopenSUSE Authenticated command injection in SNMP options of a Device 7.2 High -
cactiopenSUSE Open redirect in change password functionality in Cacti 3.5 Low -
cactiopenSUSE Stored Cross-Site-Scripting on data_sources.php debug html-block in Cacti 6.1 Medium -
cactiopenSUSE Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti 4.6 Medium -
cactiopenSUSE A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti 8.8 High -
cactiopenSUSE Authenticated SQL injection vulnerability in reports_user.php in Cacti 8.8 High -
cactiopenSUSE Authenticated SQL injection vulnerability in graphs.php in Cacti 8.8 High -
cactiopenSUSE Unauthenticated SQL Injection in graph_view.php in Cacti 9.8 Critical -
cactiopenSUSE Reflected Cross-site Scripting in graphs_new.php in Cacti 6.1 Medium -
cactiopenSUSE Stored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti 6.1 Medium -
cactiopenSUSE Stored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti 6.1 Medium -
cactiopenSUSE Stored Cross-site Scripting on data_sources.php device name view in Cacti 6.1 Medium -
cactiopenSUSE Stored Cross-site Scripting on host.php verbose data-query debug view in Cacti 6.1 Medium -
cactiopenSUSE Stored Cross-site Scripting on data_debug.php datasource path view in Cacti 6.1 Medium -
cactiopenSUSE Stored Cross-site Scripting on graphs.php data template formated name view in Cacti 6.1 Medium -
cactiopenSUSE Unauthenticated Command Injection 9.8 Critical -
cactiopenSUSE Security update for cacti, cacti-spine No score -
cactiopenSUSE Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types. 9.8 Critical -
cactiopenSUSE Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter... 6.1 Medium -
cactiopenSUSE An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in... 8.8 High -
cactiopenSUSE A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to... 5.4 Medium -
cactiopenSUSE A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter... 7.2 High -
cactiopenSUSE Insufficient output escaping of attachment names in PHPMailer 7.5 High -
cactiopenSUSE Potential XSS vulnerability in jQuery 6.9 Medium -
cactiopenSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
cactiopenSUSE graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via... 8.8 High -
cactiopenSUSE Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability... 6.5 Medium -
cactiopenSUSE Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the... 8.8 High - Show olderLoading…