Lucene search
+L

3412 matches found

UbuntuCve
UbuntuCve
added 2022/03/03 11:15 p.m.35 views

CVE-2022-0730

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types...

9.8CVSS7.2AI score0.03499EPSS
SaveExploits0References2
Prion
Prion
added 2022/03/03 11:15 p.m.27 views

Authentication flaw

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types...

6.8CVSS9.4AI score0.03499EPSS
SaveExploits0References7Affected Software3
OSV
OSV
added 2022/03/03 11:15 p.m.3 views

UBUNTU-CVE-2022-0730

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types...

9.8CVSS7.3AI score0.03499EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/03/03 12:0 a.m.11 views

Cacti 授权问题漏洞

Cacti is an open source set of network traffic monitoring and analysis tools from the Cacti team. The tool fetches data via snmpget, uses RRDtool drawing graphs for analysis, and provides data and user management features. cacti suffers from an authorization issue vulnerability that can be...

9.8CVSS5.7AI score0.03499EPSS
SaveExploits0References15
OSV
OSV
added 2022/03/03 12:0 a.m.37 views

CVE-2022-0730

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types...

9.8CVSS6.9AI score0.03499EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2022/03/03 12:0 a.m.45 views

CVE-2022-0730

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types...

9.8AI score0.03499EPSS
SaveExploits0References7
CVE
CVE
added 2022/03/03 12:0 a.m.185 views

CVE-2022-0730

CVE-2022-0730: In Cacti, authentication can be bypassed under certain LDAP conditions when anonymous binding is enabled. Public advisories (Debian DSA/DLA, Fedora/Amazon, ENISA EUVD) reference this as a vulnerability in cacti with authenticated LDAP bypass risk. Debian fixed multiple releases: fo...

9.8CVSS9.4AI score0.03499EPSS
SaveExploits0References7Affected Software1
AlpineLinux
AlpineLinux
added 2022/03/03 12:0 a.m.102 views

CVE-2022-0730

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types...

9.8CVSS9.7AI score0.03499EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2022/03/03 12:0 a.m.74 views

CVE-2022-0730

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types...

9.8CVSS9.7AI score0.03499EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2014-0403)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.8AI score0.10773EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2017-0267)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6AI score0.02921EPSS
SaveExploits2References8
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.29 views

Mageia: Security Advisory (MGASA-2014-0302)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.04957EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.24 views

Mageia: Security Advisory (MGASA-2016-0178)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.02827EPSS
SaveExploits3References4
CNVD
CNVD
added 2022/01/23 12:0 a.m.48 views

Cacti Cross-Site Scripting Vulnerability (CNVD-2022-08362)

Cacti is an open source set of network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, uses RRDtool drawing graphs for analysis, and provides data and user management features. a cross-site scripting vulnerability exists in Cacti, which stems from Cac...

5.4CVSS2.5AI score0.00532EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/23 12:0 a.m.52 views

Cacti Cross-Site Scripting Vulnerability (CNVD-2022-08363)

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool uses snmpget to obtain data, uses RRDtool to draw graphs for analysis, and provides data and user management features. cross-site scripting vulnerability exists in Cacti, which stems from the...

5.4CVSS0.4AI score0.00533EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/19 9:15 p.m.7 views

CVE-2021-3816

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the groupprefix field during the creation of a new group via "Copy" method at usergroupadmin.php...

5.4CVSS6.2AI score0.00533EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/19 9:15 p.m.25 views

CVE-2021-3816

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the groupprefix field during the creation of a new group via "Copy" method at usergroupadmin.php...

5.4CVSS0.00533EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/19 9:15 p.m.26 views

CVE-2021-23225

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "newusername" field during creation of a new user via "Copy" method at useradmin.php...

5.4CVSS0.00532EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/19 9:15 p.m.5 views

CVE-2021-23225

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "newusername" field during creation of a new user via "Copy" method at useradmin.php...

5.4CVSS6.8AI score0.00532EPSS
SaveExploits0References3
OSV
OSV
added 2022/01/19 9:15 p.m.19 views

CVE-2021-23225

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "newusername" field during creation of a new user via "Copy" method at useradmin.php...

5.4CVSS6.2AI score
SaveExploits0References2
Rows per page
Query Builder