Lucene search
+L

1136 matches found

NVD
NVD
added 2023/09/05 9:15 p.m.108 views

CVE-2023-39515

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS5.6AI score0.00703EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2023/09/05 9:15 p.m.36 views

CVE-2023-39514

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS6.7AI score0.00742EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/05 9:15 p.m.11 views

UBUNTU-CVE-2023-39514

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS7.2AI score0.00742EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2023/09/05 9:15 p.m.39 views

CVE-2023-39512

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS6.9AI score0.00713EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2023/09/05 9:9 p.m.48 views

CVE-2023-39516

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS6.8AI score0.00702EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2023/09/05 8:42 p.m.38 views

CVE-2023-39366 Stored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS7.2AI score0.00758EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2023/09/05 8:42 p.m.56 views

CVE-2023-39366

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS5.2AI score0.00758EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2023/09/05 8:6 p.m.41 views

CVE-2023-39515

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS6.8AI score0.00703EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2023/09/05 8:6 p.m.38 views

CVE-2023-39515

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS5.1AI score0.00703EPSS
SaveExploits1
OSV
OSV
added 2023/09/05 8:6 p.m.38 views

CVE-2023-39515 Stored Cross-site Scripting on data_debug.php datasource path view in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS6.6AI score
SaveExploits0References8
OSV
OSV
added 2023/09/05 8:2 p.m.43 views

CVE-2023-39514 Stored Cross-site Scripting on graphs.php data template formated name view in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS6.5AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2023/09/05 8:2 p.m.49 views

CVE-2023-39514

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS5.5AI score0.00742EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2023/09/05 6:37 p.m.6 views

RESTEasy: creation of insecure temp files

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

5.5CVSS5.8AI score0.00819EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/09/05 12:0 a.m.4 views

PT-2023-4941 · Cacti +1 · Cacti +1

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.25 Description: The issue is a Stored Cross-Site-Scripting XSS vulnerability that allows an authenticated user to poison data stored in the Cacti database. This data will be viewed by administrative Cacti accounts...

9.8CVSS5.8AI score0.99826EPSS
SaveExploits136References216
Citrix
Citrix
added 2023/08/23 12:0 a.m.15 views

Citrix Director Message: "Cannot Retrieve Data". Error: Data source cannot be found.

Delivery Controller error: The description for Event ID 5 from source Citrix Director Service cannot be found.Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. On...

6.9AI score
SaveExploits0
Circl
Circl
added 2023/07/24 7:25 a.m.9 views

CVE-2023-3855

creationtimestamp| type| source ---|---|--- 2023-07-24 07:25:46+00:00| seen| https://t.me/cibsecurity/67136...

6.1CVSS4.7AI score0.00363EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.15 views

The vulnerabilities of the FactoryTalk Policy Manager and FactoryTalk System Services software allow attackers to disclose protected information.

The vulnerabilities of the FactoryTalk Policy Manager and FactoryTalk System Services software are related to deficiencies in the data source verification mechanism. Exploitation of these vulnerabilities can allow attackers to disclose protected information...

4.1CVSS5.5AI score0.00384EPSS
SaveExploits0References5Affected Software2
CNNVD
CNNVD
added 2023/06/06 12:0 a.m.7 views

grafanaplugin 命令注入漏洞

grafanaplugin is a TDengine data source plugin for grafana. A command injection vulnerability exists in grafanaplugin, which can be exploited by an attacker to execute arbitrary code...

9.8CVSS8.8AI score0.04049EPSS
SaveExploits1References4
FreeBSD
FreeBSD
added 2023/06/06 12:0 a.m.35 views

Grafana -- Grafana DS proxy race condition

Grafana Labs reports: We have discovered a vulnerability with Grafana’s data source query endpoints that could end up crashing a Grafana instance. If you have public dashboards PD enabled, we are scoring this as a CVSS 7.5 High. If you have disabled PD, this vulnerability is still a risk, but...

7.5CVSS6.8AI score0.00745EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/06 12:0 a.m.11 views

Grafana 安全漏洞

Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus and so on. A security vulnerability exists in Grafana versions prior to 9.4.12, 9.5.3, and 9.5.3, which...

7.5CVSS7.2AI score0.00745EPSS
SaveExploits0References6
Rows per page
Query Builder