CVE-2017-12927

CVE-2017-12927 is an XSS vulnerability in Cacti, exposed via spikekill.php in Cacti 1.1.17. Upgrading to the patched release (e.g., 1.1.19) is recommended; advisories from openSUSE, Fedora, and Amazon Linux reference this CVE and the fix as part of their updates. The connected documents do not pr...

CVE-2017-12927

A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php...

CVE-2017-12927

A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php...

Amazon Linux AMI : cacti (ALAS-2017-874)

spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter. CVE-2017-12065 Cross-site scripting XSS vulnerability in aggregategraphs.php in Cacti before 1.1.16 allows remote authenticated users to inject...

Important: cacti

Issue Overview: spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter. CVE-2017-12065 Cross-site scripting XSS vulnerability in aggregategraphs.php in Cacti before 1.1.16 allows remote authenticated user...

Cacti <= 0.8.8b Multiple Vulnerabilities - Windows

Cacti is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cacti <= 0.8.8b Multiple Vulnerabilities - Linux

Cacti is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Updated cacti packages fix security vulnerabilities

Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php CVE-2017-10970. Cross-site scripting XSS vulnerability in...

MGASA-2017-0267 Updated cacti packages fix security vulnerabilities

Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php CVE-2017-10970. Cross-site scripting XSS vulnerability in...

Fedora Update for cacti FEDORA-2017-127e76d78d

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : cacti (2017-127e76d78d)

Update to 1.1.16 - CVE-2017-12065 CVE-2017-12066 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.16 ---- - Update to 1.1.15 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.15 ---- - Update to 1.1.14 Release notes:...

[SECURITY] Fedora 25 Update: cacti-1.1.16-1.fc25

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

openSUSE Security Update : cacti / cacti-spine (openSUSE-2017-889)

This update for cacti, cacti-spine fixes the following issues : - CVE-2017-12065: Possible code execution via avgnan, outlier-start, or outlier-end parameter bsc1051633 - CVE-2017-11691: XSS in authprofile.php allows remote attackers to inject arbitrary JS via specially crafted HTTP Referer heade...

Fedora Update for cacti FEDORA-2017-6833997d76

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : cacti (2017-6833997d76)

Update to 1.1.16 - CVE-2017-12065 CVE-2017-12066 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.16 ---- - Update to 1.1.15 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.15 ---- - Update to 1.1.14 Release notes:...

[SECURITY] Fedora 26 Update: cacti-1.1.16-1.fc26

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

Fedora Update for cacti FEDORA-2017-7ab0179693

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cacti cross-site scripting vulnerability (CNVD-2017-26582)

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A cross-site scripting vulnerability exists in the...

Cacti Multiple Vulnerabilities - Linux

Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cacti:cacti"; if description...

Cacti Arbitrary Code Execution Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . An arbitrary code execution vulnerability exists in the spikekill.p...