cacti-spine vulnerabilities (openSUSE)
53 vulnerabilities.
cacti-spineopenSUSEAuthentication Bypass when using using older password hashes9.1 Criticalcacti-spineopenSUSECacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database6.5 Mediumcacti-spineopenSUSECacti RCE vulnerability by file include in lib/plugin.php8.1 Highcacti-spineopenSUSECacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database4.6 Mediumcacti-spineopenSUSESQL Injection vulnerability in automation_get_new_graphs_sql8.8 Highcacti-spineopenSUSECacti XSS vulnerability in lib/html.php by reading dirty data stored in database4.6 Mediumcacti-spineopenSUSECacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database5.7 Mediumcacti-spineopenSUSECacti Cross-site Scripting vulnerability when using JavaScript based messaging API5.4 Mediumcacti-spineopenSUSECacti Cross-site Scripting vulnerability when managing trees7.6 Highcacti-spineopenSUSECacti RCE vulnerability when importing packages9.1 Criticalcacti-spineopenSUSESQL Injection vulnerability when managing SNMP Notification Receivers8.8 Highcacti-spineopenSUSECross-Site Scripting vulnerability when Import xml template file5.4 Mediumcacti-spineopenSUSECacti has incomplete fix for CVE-2023-395156.1 Mediumcacti-spineopenSUSECacti SQL Injection vulnerability8.8 Highcacti-spineopenSUSECacti is vulnerable to cross-Site scripting (XSS) DOM5.4 Mediumcacti-spineopenSUSELocal File Inclusion (RCE) in Cacti8.1 Highcacti-spineopenSUSEStored Cross-Site-Scripting on reports_admin.php device name in Cacti6.1 Mediumcacti-spineopenSUSEInsecure Deserialization in Cacti4.3 Mediumcacti-spineopenSUSEAuthenticated command injection in SNMP options of a Device7.2 Highcacti-spineopenSUSEOpen redirect in change password functionality in Cacti3.5 Lowcacti-spineopenSUSEStored Cross-Site-Scripting on data_sources.php debug html-block in Cacti6.1 Mediumcacti-spineopenSUSEUnchecked regular expressions can lead to SQL Injection and data leakage in Cacti4.6 Mediumcacti-spineopenSUSEA Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti8.8 Highcacti-spineopenSUSEAuthenticated SQL injection vulnerability in reports_user.php in Cacti8.8 Highcacti-spineopenSUSEAuthenticated SQL injection vulnerability in graphs.php in Cacti8.8 Highcacti-spineopenSUSEUnauthenticated SQL Injection in graph_view.php in Cacti9.8 Criticalcacti-spineopenSUSEReflected Cross-site Scripting in graphs_new.php in Cacti6.1 Mediumcacti-spineopenSUSEStored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti6.1 Mediumcacti-spineopenSUSEStored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti6.1 Mediumcacti-spineopenSUSEStored Cross-site Scripting on data_sources.php device name view in Cacti6.1 Mediumcacti-spineopenSUSEStored Cross-site Scripting on host.php verbose data-query debug view in Cacti6.1 Mediumcacti-spineopenSUSEStored Cross-site Scripting on data_debug.php datasource path view in Cacti6.1 Mediumcacti-spineopenSUSEStored Cross-site Scripting on graphs.php data template formated name view in Cacti6.1 Mediumcacti-spineopenSUSEUnauthenticated Command Injection9.8 Criticalcacti-spineopenSUSESecurity update for cacti, cacti-spineNo scorecacti-spineopenSUSEUnder certain ldap conditions, Cacti authentication can be bypassed with certain credential types.9.8 Criticalcacti-spineopenSUSECacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter...6.1 Mediumcacti-spineopenSUSEAn issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in...8.8 Highcacti-spineopenSUSEA SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter...7.2 Highcacti-spineopenSUSEInsufficient output escaping of attachment names in PHPMailer7.5 Highcacti-spineopenSUSEPotential XSS vulnerability in jQuery6.9 Mediumcacti-spineopenSUSEjQuery has a potential XSS vulnerability6.9 Mediumcacti-spineopenSUSEgraph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via...8.8 Highcacti-spineopenSUSECacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability...6.5 Mediumcacti-spineopenSUSECacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the...8.8 Highcacti-spineopenSUSECacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...6.1 Mediumcacti-spineopenSUSECacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization...8.1 Highcacti-spineopenSUSEIn Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph)...4.3 Mediumcacti-spineopenSUSEA cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2...5.4 Mediumcacti-spineopenSUSEA cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0...4.8 Medium- Show olderLoading…