CVE-2017-10970

Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...

Cacti -- Cross-site scripting (XSS) vulnerability in link.php

kimiizhang reports: Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter...

Amazon Linux AMI : cacti (ALAS-2017-817)

PHP Object Injection Vulnerabilities CVE-2014-4000 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2017-817. include'compat.inc'; if description scriptid99530; scriptversion"3.5";...

Medium: cacti

Issue Overview: PHP Object Injection Vulnerabilities CVE-2014-4000 Affected Packages: cacti Issue Correction: Run yum update cacti or yum update --advisory ALAS-2017-817 to update your system. New Packages: noarch: cacti-1.0.4-1.14.amzn1.noarch src: cacti-1.0.4-1.14.amzn1.src Additional...

openSUSE Security Update : cacti (openSUSE-2017-325)

This update for cacti fixes the following vulnerabilities : - CVE-2014-4000: PHP Object Injection Vulnerabilities boo1022564 It also updates cacti to version 1.0.4 to include the latest upstream bugfixes and improvements. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

Fedora 24 : cacti (2017-a513be0939)

Update to 1.0.4 Release notes : http://www.cacti.net/releasenotes100.php http://www.cacti.net/releasenotes101.php http://www.cacti.net/releasenotes102.php http://www.cacti.net/releasenotes103.php http://www.cacti.net/releasenotes104.php Note that Tenable Network Security has extracted the...

Fedora Update for cacti FEDORA-2017-a513be0939

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: cacti-1.0.4-1.fc24

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

Fedora 25 : cacti (2017-8b0737b093)

Update to 1.0.4 Release notes : http://www.cacti.net/releasenotes100.php http://www.cacti.net/releasenotes101.php http://www.cacti.net/releasenotes102.php http://www.cacti.net/releasenotes103.php http://www.cacti.net/releasenotes104.php Note that Tenable Network Security has extracted the...

Fedora Update for cacti FEDORA-2017-8b0737b093

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 25 Update: cacti-1.0.4-1.fc25

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

Amazon Linux: Security Advisory (ALAS-2016-711)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 560-2] cacti regression update

Package : cacti Version : 0.8.8a+dfsg-5+deb7u10 The fix for CVE-2016-2313 did not take into account guest users. This update fixes it. For Debian 7 "Wheezy", these problems have been fixed in version 0.8.8a+dfsg-5+deb7u10. We recommend that you upgrade your cacti packages. Further information abo...

DLA-560-2 cacti - regression update

Bulletin has no description...

Debian DLA-560-2 : cacti regression update

Three security issues have been found in cacti : CVE-2016-2313 authlogin.php allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database. CVE-2016-3172 A SQL injection vulnerability in tree.php allows remote...

DLA-560-1 cacti - security update

Bulletin has no description...

[SECURITY] [DLA 560-1] cacti security update

Package : cacti Version : 0.8.8a+dfsg-5+deb7u9 CVE ID : CVE-2016-2313 CVE-2016-3172 CVE-2016-3659 Three security issues have been found in cacti: CVE-2016-2313 authlogin.php allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user...

GLSA-201607-05 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201607-05 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code wit...

Cacti: Multiple vulnerabilities

Background Cacti is a complete frontend to rrdtool. Description Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process, or remote...

Fedora 23 : cacti (2016-879977eea0)

Update to 0.8.8h - CVE-2016-3659 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...