49 matches found
FreeBSD : cacti -- XSS exposure (cd864f1a-8e5a-11ea-b5b4-641c67a117d8)
Cacti developer reports : Lack of escaping of color items can lead to XSS exposure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors Redistribution and use ...
openSUSE Security Update : cacti / cacti-spine (openSUSE-2020-558)
This update for cacti, cacti-spine to version 1.2.11 fixes the following issues : This update is fixing multiple vulnerabilities and adding bug fixes. For more details consult the changes file. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
openSUSE: Security Advisory for cacti, (openSUSE-SU-2020:0558-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
FreeBSD : cacti -- multiple vulnerabilities (e2b564fc-7462-11ea-af63-38d547003487)
The Cacti developers reports : When guest users have access to realtime graphs, remote code could be executed CVE-2020-8813. Lack of escaping on some pages can lead to XSS exposure CVE-2020-7106. Remote Code Execution due to input validation failure in Performance Boost Debug Log CVE-2020-7237. C...
Fedora: Security Advisory for cacti (FEDORA-2020-d6a9e27bb1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for cacti (FEDORA-2020-552e4e7879)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE: Security Advisory for cacti, (openSUSE-SU-2020:0272-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 31 : cacti / cacti-spine (2020-90f1c8229e)
Update to 1.2.9 - CVE-2020-7106, CVE-2020-7237 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
Fedora 30 : cacti / cacti-spine (2020-0fc6dd0fd2)
Update to 1.2.9 - CVE-2020-7106, CVE-2020-7237 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
Fedora: Security Advisory for cacti (FEDORA-2020-90f1c8229e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Cacti < 1.2.9 Multiple Vulnerabilities - Linux
Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-7106
CVE-2020-7106 affects Cacti 1.2.8, with stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php; root cause is improper escaping/display of a raw string from the database (via $header). Public advisori...
CVE-2019-7106
Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2019-7106
CVE-2019-7106 affects Adobe XD before v16.0; a path-traversal vulnerability could allow arbitrary code execution. Affected: Adobe XD 16.0 and earlier (macOS and other platforms). Underlying issue: path traversal permitting code execution in the context of the current user. Remediation: Adobe rele...
CVE-2018-7106
CVE-2018-7106 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-7106
CVE-2017-7106 affects WebKit components in Apple platforms and is described as enabling address-bar spoofing when visiting malicious content. The affected products listed include iOS before 11, Safari before 11, and iCloud for Windows before 7.0. Apple security updates indicate that these issues ...
macOS : Apple Safari < 11.0 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.0. It is, therefore, affected by multiple vulnerabilities as described in the HT208116 security advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103360;...
CVE-2015-7106
creationtimestamp| type| source ---|---|--- 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39369...
CVE-2015-7106
CVE-2015-7106 affects the Intel Graphics Driver in Apple OS X before 10.11.2. Local users can gain privileges or cause memory corruption (DoS) via unspecified vectors. Root cause: memory corruption in Intel Graphics Driver. Exploitation is evidenced by exploit-db entry 39369. Mitigation: update t...