Lucene search
Gentoo FoundationGLSA-202007-03HistoryJul 26, 2020 - 12:00 a.m.
Cacti: Multiple vulnerabilities
2020-07-2600:00:00
Gentoo Foundation
security.gentoo.org
41
0.302 Low
EPSS
Percentile
96.9%
Background
Cacti is a complete frontend to rrdtool.
Description
Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details.
Impact
Please review the referenced CVE identifiers for details.
Workaround
There is no known workaround at this time.
Resolution
All Cacti users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-analyzer/cacti-1.2.13"
All Cacti Spine users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-analyzer/cacti-spine-1.2.13"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-analyzer/cacti | < 1.2.13 | UNKNOWN |
| Gentoo | any | all | net-analyzer/cacti-spine | < 1.2.13 | UNKNOWN |
Related
nessus
nessus
GLSA-202007-03 : Cacti: Multiple vulnerabilities
2020-07-27 00:00:00
openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-1060)
2020-07-27 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: cacti-1.2.13-1.fc32
2020-07-23 01:06:59
[SECURITY] Fedora 31 Update: cacti-1.2.13-1.fc31
2020-07-23 01:17:57
[SECURITY] Fedora 32 Update: drupal8-8.9.0-1.fc32
2020-06-16 01:32:24
openvas
openvas
Cacti <= 1.2.12 Multiple Vulnerabilities - Windows
2020-06-18 00:00:00
Cacti <= 1.2.12 Multiple Vulnerabilities - Linux
2020-06-18 00:00:00
openSUSE: Security Advisory for cacti, (openSUSE-SU-2020:1060-1)
2020-07-26 00:00:00
suse
suse
Security update for cacti, cacti-spine (moderate)
2020-07-25 00:00:00
Security update for cacti, cacti-spine (moderate)
2020-07-28 00:00:00
Security update for otrs (moderate)
2020-11-10 00:00:00
freebsd
freebsd
Cacti -- multiple vulnerabilities
2020-07-15 00:00:00
oraclelinux
oraclelinux
jquery-ui security update
2022-03-01 00:00:00
bootstrap security update
2021-08-09 00:00:00
ipa security and bug fix update
2021-03-19 00:00:00
ibm
ibm
atlassian
atlassian
jquery 2.2.4 XSS vulnerability
2022-08-24 14:53:45
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
debian
debian
[SECURITY] [DLA 2608-1] jquery security update
2021-03-26 01:32:42
[SECURITY] [DSA 4693-1] drupal7 security update
2020-05-26 21:08:21
attackerkb
attackerkb
hp
hp
HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)
2020-09-17 00:00:00
Certain HP Printers and MFP products - Cross-Site Scripting (XSS)
2020-09-17 00:00:00
joomla
joomla
[20200604] - Core - XSS in jQuery.htmlPrefilter
2020-04-10 00:00:00
osv
osv
jquery - security update
2021-03-25 00:00:00
drupal7 - security update
2020-05-26 00:00:00
Persistent Cross-site Scripting vulnerability in PrivateBin
2022-04-12 20:45:22
githubexploit
githubexploit
Exploit for Cross-site Scripting in Jquery
2021-10-16 01:10:33
Exploit for SQL Injection in Cacti
2021-05-28 16:40:49
Exploit for SQL Injection in Cacti
2021-04-28 20:57:00
checkpoint_advisories
checkpoint_advisories
jQuery Cross Site Scripting (CVE-2020-11022; CVE-2020-11023)
2020-11-16 00:00:00
Cacti SQL Injection (CVE-2020-14295)
2021-05-23 00:00:00
Cacti color.php SQL Injection (CVE-2020-14295)
2020-09-21 00:00:00
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002
2020-05-20 00:00:00
redhat
redhat
(RHSA-2020:4211) Moderate: Red Hat AMQ Interconnect 1.9.0 release and security update
2020-10-08 06:44:00
(RHSA-2020:3807) Moderate: Red Hat Virtualization security, bug fix, and enhancement update
2020-09-23 15:54:23
(RHSA-2020:2217) Moderate: OpenShift Container Platform 3.11 security update
2020-05-28 11:08:25
typo3
typo3
Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)
2020-07-29 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1
2020-10-21 00:00:00
prion
prion
zdt
zdt
Cacti 1.2.12 SQL Injection / Remote Command Execution Exploit
2021-06-02 00:00:00
Cacti 1.2.12 - (filter) SQL Injection / Remote Code Execution Exploit
2021-04-29 00:00:00
jQuery 1.2 - Cross-Site Scripting Vulnerability
2021-04-14 00:00:00
github
github
Persistent Cross-site Scripting vulnerability in PrivateBin
2022-04-12 20:45:22
Potential XSS vulnerability in jQuery
2020-04-29 22:19:14
Use of insecure jQuery version in OctoberCMS
2020-06-05 19:37:49
cvelist
cvelist
CVE-2020-14295
2020-06-17 13:47:36
CVE-2020-11022 Potential XSS vulnerability in jQuery
2020-04-29 00:00:00
CVE-2020-11023 Potential XSS vulnerability in jQuery
2020-04-29 00:00:00
cve
cve
debiancve
debiancve
veracode
veracode
Remote Code Execution (RCE)
2021-04-29 12:16:07
Cross-Site Scripting (XSS)
2020-04-30 01:59:55
Cross-Site Scripting (XSS)
2020-04-30 02:21:22
packetstorm
packetstorm
Cacti 1.2.12 SQL Injection / Remote Command Execution
2021-06-02 00:00:00
Cacti 1.2.12 SQL Injection / Remote Code Execution
2021-04-29 00:00:00
jQuery 1.2 Cross Site Scripting
2021-04-14 00:00:00
alpinelinux
alpinelinux
ubuntucve
ubuntucve
f5
f5
K02453220 : jQuery vulnerability CVE-2020-11022
2020-08-03 00:00:00
K66544153 : jQuery vulnerability CVE-2020-11023
2020-08-03 00:00:00
nodejs
nodejs
Cross-Site Scripting
2020-04-30 18:19:09
redhatcve
redhatcve
CVE-2020-11023
2021-06-20 07:11:02
CVE-2020-11022
2020-04-29 23:09:52
almalinux
almalinux
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
ics
ics
Sensormatic Electronics VideoEdge
2021-11-02 12:00:00
amazon
amazon
Medium: ipa
2021-04-20 17:55:00
hackerone
hackerone
Reddit: CVE-2020-11022
2022-12-20 17:19:58
rocky
rocky
idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07