cacti vulnerabilities (openSUSE)
90 vulnerabilities.
cactiopenSUSECacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...6.1 MediumcactiopenSUSECacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization...8.1 HighcactiopenSUSEIn Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph)...4.3 MediumcactiopenSUSEA cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2...5.4 MediumcactiopenSUSEA cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0...4.8 MediumcactiopenSUSEA cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to...4.8 MediumcactiopenSUSEA cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0...4.8 MediumcactiopenSUSECacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and...8.8 HighcactiopenSUSECacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.6.1 MediumcactiopenSUSECacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the...4.9 MediumcactiopenSUSECacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks...7.2 HighcactiopenSUSElib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS...7.2 HighcactiopenSUSEinclude/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.6.1 MediumcactiopenSUSElib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an...5.4 MediumcactiopenSUSEA cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill...6.1 MediumcactiopenSUSEspikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via...9.8 CriticalcactiopenSUSECross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote...5.4 MediumcactiopenSUSECross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote...5.4 MediumcactiopenSUSECross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous...5.4 MediumcactiopenSUSESQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated...8.8 HighcactiopenSUSESQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users...8.8 HighcactiopenSUSEauth_login.php in Cacti before 0.8.8g allows remote authenticated users who use web...8.8 HighcactiopenSUSESQL injection vulnerability in the host_new_graphs function in graphs_new.php in Cacti 0.8.8f and...8.8 HighcactiopenSUSESQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows...7.5 HighcactiopenSUSESQL injection vulnerability in the host_new_graphs_save function in graphs_new.php in Cacti 0.8...6.5 MediumcactiopenSUSESQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to...7.5 HighcactiopenSUSESQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary...7.5 HighcactiopenSUSEMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated...3.5 LowcactiopenSUSECross-site scripting (XSS) vulnerability in data_sources.php in Cacti 0.8.8b allows remote...3.5 LowcactiopenSUSEMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to...4.3 MediumcactiopenSUSElib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary...7.5 HighcactiopenSUSElib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to...6.5 MediumcactiopenSUSECross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows...6.8 MediumcactiopenSUSEMultiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier...7.5 HighcactiopenSUSECross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows...4.3 MediumcactiopenSUSESQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers...7.5 HighcactiopenSUSEMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote...4.3 MediumcactiopenSUSECacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by...9.0 HighcactiopenSUSEgraph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users...7.8 HighcactiopenSUSESQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled,...7.5 High