3446 matches found
MGASA-2015-0306 Updated cacti package fixes security vulnerability
Cross-site scripting XSS vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors CVE-2015-2665. SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
openSUSE Security Update : cacti (openSUSE-2015-510)
Cacti was updated to 0.8.8e to fix several security issues. The following vulnerabilities were fixed : - Multiple XSS and SQL injection vulnerabilities boo937997 - CVE-2015-4634: SQL injection in graphs.php boo937997 In addition, this update contains upstream bug fixes. %NASLMINLEVEL 70300 C...
[SECURITY] [DSA 3312-1] cacti security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3312-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini July 22, 2015 https://www.debian.org/security/faq -...
Cacti SQL Injection Vulnerability (CNVD-2015-04994)
Cacti is based on PHP, MySQL, SNMP and RRDTool developed a set of graphical analysis of network traffic monitoring tools . Cacti 'graphs.php' , 'cdef.php', 'datatemplates.php', 'graphtemplates.php' and 'hosttemplates.php' scripts incorrectly filter user input, allowing remote attackers to exploit...
Debian DSA-3312-1 : cacti - security update
Multiple SQL injection vulnerabilities were discovered in cacti, a web interface for graphing of monitoring systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3312. The text itself i...
[SECURITY] [DSA 3312-1] cacti security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3312-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini July 22, 2015 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3312-1 (cacti - security update)
Multiple SQL injection vulnerabilities were discovered in cacti, a web interface for graphing of monitoring systems. OpenVAS Vulnerability Test $Id: deb3312.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3312-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone...
DSA-3312-1 cacti - security update
Bulletin has no description...
FreeBSD : cacti -- Multiple XSS and SQL injection vulnerabilities (0bfda05f-2e6f-11e5-a4a5-002590263bf5)
The Cacti Group, Inc. reports : Important Security Fixes - Multiple XSS and SQL injection vulnerabilities - CVE-2015-4634 - SQL injection in graphs.php Changelog - bug: Fixed various SQL Injection vectors - bug0002574: SQL Injection Vulnerabilities in graph items and graph template items -...
Debian: Security Advisory (DSA-3312-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-278-2 : cacti regression update
The last update of cacti in squeeze-lts, version 0.8.7g-1+squeeze7, had two regressions that caused certain output of scripts to not be processed and caused the save button of graphs.php to not save the changes. The regressions have been fixed in 0.8.7g-1+squeeze8. NOTE: Tenable Network Security...
[SECURITY] [DLA 278-2] cacti regression update
Package : cacti Version : 0.8.7g-1+squeeze8 The last update of cacti in squeeze-lts, version 0.8.7g-1+squeeze7, had two regressions that caused certain output of scripts to not be processed and caused the save button of graphs.php to not save the changes. The regressions have been fixed in...
[SECURITY] [DLA 278-1] cacti security update
Package : cacti Version : 0.8.7g-1+squeeze7 CVE ID : CVE-2015-4634 Debian Bug : NA Several SQL injection vulnerabilities were discovered in cacti, a frontend to rrdtool for monitoring systems and service: CVE-2015-4634 SQL injection vulnerability in Cacti before 0.8.8e allows remote attackers to...
Cacti Multiple Vulnerabilities (Jun 2015)
Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cacti:cacti"; ifdescription...
DLA-278-1 cacti - security update
Bulletin has no description...
DLA-278-2 cacti - regression update
Bulletin has no description...
Cacti cross-site scripting vulnerability (CNVD-2015-04695)
Cacti is a set of open source network traffic monitoring and analysis tools. A cross-site scripting vulnerability exists in Cacti's settings.php script, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitiv...
cacti -- Multiple XSS and SQL injection vulnerabilities
The Cacti Group, Inc. reports: Important Security Fixes Multiple XSS and SQL injection vulnerabilities CVE-2015-4634 - SQL injection in graphs.php Changelog bug: Fixed various SQL Injection vectors bug0002574: SQL Injection Vulnerabilities in graph items and graph template items bug0002577:...
