3412 matches found
Fedora: Security Advisory for cacti (FEDORA-2022-6a7e259e15)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for cacti-spine (FEDORA-2022-e619e3d5d0)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: cacti-1.2.20-1.fc35
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...
[SECURITY] Fedora 34 Update: cacti-spine-1.2.20-1.fc34
Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance...
[SECURITY] Fedora 34 Update: cacti-1.2.20-1.fc34
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...
The vulnerabilities in the components reports_admin.php, data_queries.php, data_input.php, graph_templates.php, graphs.php, reports_admin.php, and data_input.php of the Cacti network monitoring software allow a attacker to compromise the integrity of the data.
The vulnerability of the components reportsadmin.php, dataqueries.php, datainput.php, graphtemplates.php, graphs.php, reportsadmin.php, and datainput.php of the Cacti network monitoring software is related to the lack of security measures for the website structure. Exploiting this vulnerability...
Cross-site Scripting (XSS)
cacti is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization via the reportsadmin.php, dataqueries.php, datainput.php, graphtemplates.php, graphs.php, reportsadmin.php, and datainput.php...
Privilege Escalation
cacti is vulnerable to privilege escalation. The vulnerability exists due to a lack of immediately invalidating any permission granted to a disabled user...
Cross-Site Scripting (XSS)
Cacti 1.2.8 has stored XSS in datasources.php, colortemplatesitem.php, graphs.php, graphitems.php, lib/apiautomation.php, useradmin.php, and usergroupadmin.php, as demonstrated by the description parameter in datasources.php a raw string from the database that is displayed by $header to trigger t...
Authentication Bypass
cacti is vulnerable to authentication bypass. The vulnerability exists under certain ldap conditions which allows an attacker to bypass cacti authentication...
Debian: Security Advisory (DLA-2965-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2965-1] cacti security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2965-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler March 29, 2022 https://wiki.debian.org/LTS -...
Debian DLA-2965-1 : cacti - LTS security update
The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2965 advisory. Multiple vulnerabilities were discovered in Cacti, a web interface for graphing of monitoring systems, leading to authentication bypass and cross-site scripting XS...
DLA-2965-1 cacti - security update
Bulletin has no description...
Cacti < 1.2.20 Authentication Bypass Vulnerability - Windows
Cacti is prone to an authentication bypass vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Cacti < 1.2.20 Authentication Bypass Vulnerability - Linux
Cacti is prone to an authentication bypass vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Cacti licensing issue vulnerability
Cacti is an open source set of network traffic monitoring and analysis tools from the Cacti team. The tool fetches data via snmpget, uses RRDtool drawing graphs for analysis, and provides data and user management features. cacti suffers from an authorization issue vulnerability that can be...
CVE-2022-0730
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types...
