Skip to contentCacti vulnerabilities
Newest
- cactiauth_login.php in Cacti before 1.0.0 allows remote authenticated users who use web authentication...CVE-2016-10700Fix available8.8 High
- cactiCacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and...CVE-2014-4000Fix available8.8 High
- cactiCacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.CVE-2017-16785Fix available6.1 Medium
- cactiCacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the...CVE-2017-16661Fix available4.9 Medium
- cactiCacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks...CVE-2017-16660Fix available7.2 High
- cactilib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS...CVE-2017-16641Fix available7.2 High
- cactiinclude/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.CVE-2017-15194Fix available6.1 Medium
- cactilib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an...CVE-2017-12978Fix available5.4 Medium
- cactiA cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill...CVE-2017-12927Fix available6.1 Medium
- cactiCross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows...CVE-2017-12066Fix available5.4 Medium
- cactispikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via...CVE-2017-12065Fix available9.8 Critical
- cactiCross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote...CVE-2017-11691Fix available5.4 Medium
- cactiCross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject...CVE-2017-1000032Fix available6.1 Medium
- cactiSQL injection vulnerability in graph_templates_inputs.php in Cacti 0.8.8b allows remote attackers...CVE-2017-1000031Fix available8.8 High
- cactiCross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote...CVE-2017-11163Fix available5.4 Medium
- cactiCross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous...CVE-2017-10970Fix available5.4 Medium
- cactiSQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated...CVE-2016-3172Fix available8.8 High
- cactiSQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users...CVE-2016-3659Fix available8.8 High
- cacti, opensuse leap, opensuse +2 moreauth_login.php in Cacti before 0.8.8g allows remote authenticated users who use web...CVE-2016-2313Fix available8.8 High
- cactiSQL injection vulnerability in the host_new_graphs function in graphs_new.php in Cacti 0.8.8f and...CVE-2015-8604Fix available8.8 High
- cactiSQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows...CVE-2015-8369Fix available7.5 High
- cactiSQL injection vulnerability in the host_new_graphs_save function in graphs_new.php in Cacti 0.8...CVE-2015-8377Fix available6.5 Medium
- cactiSQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to...CVE-2015-4634Fix available7.5 High
- cactiCross-site scripting (XSS) vulnerability in settings.php in Cacti before 0.8.8d allows remote...CVE-2015-2967Fix available4.3 Medium
- cacti, fedoraproject fedora +1 moreSQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti...CVE-2015-4454Fix available7.5 High
- cacti, fedoraproject fedora +1 moreSQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary...CVE-2015-4342Fix available7.5 High
- cacti, fedoraproject fedora +1 moreCross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject...CVE-2015-2665Fix available4.3 Medium
- cactiSQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users...CVE-2015-0916Fix available6.5 Medium
- cactiSQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and...CVE-2014-5262Fix available7.5 High
- cactiThe graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote...CVE-2014-5261Fix availableEPSS 10.8%7.5 High
- cacti, debian linux, opensuse +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated...CVE-2014-5026Fix available3.5 Low
- cacti, debian linux, opensuse +2 moreCross-site scripting (XSS) vulnerability in data_sources.php in Cacti 0.8.8b allows remote...CVE-2014-5025Fix available3.5 Low
- cacti, opensuse +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to...CVE-2014-4002Fix available4.3 Medium
- cacti superlinksSQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows...CVE-2014-4644Public exploit7.5 High
- cacti, debian linux +1 morelib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary...CVE-2014-2709Fix available7.5 High
- cacti, debian linux, fedoraproject fedora +1 more +3 morelib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to...CVE-2014-2328Fix available6.5 Medium
- cacti, debian linux, opensuse +2 moreCross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows...CVE-2014-2327Fix available6.8 Medium
- cactiMultiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier...CVE-2014-2708Fix available7.5 High
- cacti, debian linux, fedoraproject fedora +1 more +3 moreCross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows...CVE-2014-2326Fix available4.3 Medium
- cacti, debian linux, opensuse +2 moreSQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers...CVE-2013-5589Fix available7.5 High
- cacti, opensuse +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote...CVE-2013-5588Fix available4.3 Medium
- cacti(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary...CVE-2013-1435Fix available7.5 High
- cactiMultiple SQL injection vulnerabilities in (1) api_poller.php and (2) utility.php in Cacti before...CVE-2013-1434Fix available7.5 High
- cactiCross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows...CVE-2011-5223Fix available4.3 Medium
- cactiSQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to...CVE-2011-4824Fix available7.5 High
- cactiMultiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat...CVE-2010-2545Fix available4.3 Medium
- cactiCross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red...CVE-2010-2544Public exploitFix available4.3 Medium
- cactiCross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g...CVE-2010-2543Public exploitFix available4.3 Medium
- cactiCacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other...CVE-2010-1645Fix available6.5 Medium
- cactiMultiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7f, as used in Red Hat...CVE-2010-1644Fix available4.3 Medium
- Show moreLoading…