3448 matches found
Debian DSA-3295-1 : cacti - security update
Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...
openSUSE Security Update : cacti (openSUSE-2015-445)
cacti was updated to 0.8.8d to fix multiple security issues and bugs. The following vulnerabilities were fixed : - SQL injection VN: JVN78187936 / TN:JPCERT98968540 - Cacti Cross-Site Scripting Vulnerability Notification FG-VD-15-017 - SQL Injection and Location header injection from cdef id...
[SECURITY] [DSA 3295-1] cacti security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3295-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 24, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3295-1] cacti security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3295-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 24, 2015 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3295-1 (cacti - security update)
Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. OpenVAS Vulnerability Test $Id: deb3295.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3295-1 using nvtgen 1.0 Script...
DSA-3295-1 cacti - security update
Bulletin has no description...
FreeBSD : cacti -- Multiple XSS and SQL injection vulnerabilities (a3929112-181b-11e5-a1cf-002590263bf5)
The Cacti Group, Inc. reports : Important Security Fixes - Multiple XSS and SQL injection vulnerabilities Changelog - bug: Fixed SQL injection VN: JVN78187936 / TN:JPCERT98968540 - bug0002542: FG-VD-15-017 Cacti Cross-Site Scripting Vulnerability Notification - bug0002571: SQL Injection and...
Debian: Security Advisory (DSA-3295-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : cacti -- multiple security vulnerabilities (a0e74731-181b-11e5-a1cf-002590263bf5)
The Cacti Group, Inc. reports : Important Security Fixes - CVE-2013-5588 - XSS issue via installer or device editing - CVE-2013-5589 - SQL injection vulnerability in device editing - CVE-2014-2326 - XSS issue via CDEF editing - CVE-2014-2327 - Cross-site request forgery CSRF vulnerability -...
Cacti 'get_hash_graph_template' function SQL injection vulnerability
Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. The tool through snmpget to obtain data , using RRDtool drawing graphs to analyze , and provide data and user management features . A SQL injection vulnerability exists in the 'gethashgraphtemplate...
Cacti Cross-Site Scripting Vulnerability
Cacti is a set of open source network traffic monitoring and analysis tools. Cacti suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...
Cacti SQL Injection Vulnerability (CNVD-2015-03938)
Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. The tool through snmpget to obtain data , using RRDtool drawing graphs to analyze , and provide data and user management features . A SQL injection vulnerability exists in versions prior to Cacti...
CVE-2015-4454
SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...
CVE-2015-4454
SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...
DEBIAN-CVE-2015-4454
SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...
DEBIAN-CVE-2015-4342
SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id...
CVE-2015-4342
SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id...
CVE-2015-4342
SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id...