Lucene search
+L

718 matches found

Cvelist
Cvelist
•added 2023/09/06 5:40 p.m.•50 views

CVE-2023-39511 Stored Cross-Site-Scripting on reports_admin.php device name in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS7.2AI score0.00785EPSS
SaveExploits1References4
Mend
Mend
•added 2023/09/06 5:40 p.m.•3 views

CVE-2023-39511

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

8.4CVSS0.00785EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2023/09/06 12:00 a.m.•12 views

PT-2023-5421

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.25 Description The issue is related to a Stored Cross-Site-Scripting XSS vulnerability, which allows an authenticated user to poison data stored in the Cacti database. This data will be viewed by administrative Cact...

6.1CVSS6.6AI score0.00785EPSS
SaveExploits1References55
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/06 12:00 a.m.•2 views

CVE-2023-39511: Improper Neutralization of Input During Web Page Generation

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS5.7AI score0.00785EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/05 9:15 p.m.•24 views

CVE-2023-39510

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS7.1AI score0.00836EPSS
SaveExploits1References5
NVD
NVD
•added 2023/09/05 9:15 p.m.•50 views

CVE-2023-39514

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS7.1AI score0.00874EPSS
SaveExploits1References5
NVD
NVD
•added 2023/09/05 9:15 p.m.•35 views

CVE-2023-39512

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS7.1AI score0.00836EPSS
SaveExploits1References5
OSV
OSV
•added 2023/09/05 9:15 p.m.•8 views

DEBIAN-CVE-2023-39366

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

4.8CVSS6.6AI score0.00889EPSS
SaveExploits1References1
Prion
Prion
•added 2023/09/05 9:15 p.m.•34 views

Cross site scripting

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

4.9CVSS6.6AI score0.00874EPSS
SaveExploits1References5Affected Software2
OSV
OSV
•added 2023/09/05 9:15 p.m.•24 views

UBUNTU-CVE-2023-39514

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS6.8AI score0.00874EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/09/05 8:42 p.m.•27 views

CVE-2023-39366 Stored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS6.6AI score0.00889EPSS
SaveExploits1References5
Mend
Mend
•added 2023/09/05 8:42 p.m.•3 views

CVE-2023-39366

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

8.4CVSS0.00889EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2023/09/05 8:39 p.m.•16 views

CVE-2023-39510 Stored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS6.6AI score0.00836EPSS
SaveExploits1References5
Mend
Mend
•added 2023/09/05 8:39 p.m.•3 views

CVE-2023-39510

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

8.4CVSS0.00836EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2023/09/05 8:39 p.m.•44 views

CVE-2023-39510 Stored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

6.1CVSS7.2AI score0.00836EPSS
SaveExploits1References5
Mend
Mend
•added 2023/09/05 8:35 p.m.•2 views

CVE-2023-39512

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

8.4CVSS0.00836EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2023/09/05 8:02 p.m.•94 views

CVE-2023-39514

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS6.8AI score0.00874EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2023/09/05 12:00 a.m.•8 views

PT-2023-4941

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.25 Description The issue is a Stored Cross-Site-Scripting XSS vulnerability that allows an authenticated user to poison data stored in the Cacti database. This data will be viewed by administrative Cacti accounts an...

8.5CVSS6.7AI score0.00874EPSS
SaveExploits1References60
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/05 12:00 a.m.•3 views

CVE-2023-39514: Improper Neutralization of Input During Web Page Generation

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

6.1CVSS5.8AI score0.00874EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2023/09/05 12:00 a.m.•13 views

The vulnerability of the formSetDeviceName() function in the Tenda AC8 router’s microprogramming software allows a hacker to execute arbitrary code, increase their privileges, or cause service failures.

The vulnerability of the formSetDeviceName function in the Tenda AC8 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, gain elevated privileges, or cause...

10CVSS8.5AI score0.01845EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder