Lucene search
K

2348 matches found

SUSE CVE
SUSE CVE
added 2025/01/28 12:21 a.m.1 views

SUSE CVE-2024-54146

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of hosttemplates.php using the graphtemplate parameter. This vulnerability is fixed in 1.2.29...

8.8CVSS8.1AI score0.37329EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2025/01/28 12:19 a.m.7 views

SUSE CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

8.8CVSS8.2AI score0.49088EPSS
Exploits10References3
ATTACKERKB
ATTACKERKB
added 2025/01/27 6:15 p.m.6 views

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

8.8CVSS6.6AI score0.49088EPSS
Exploits10References4Affected Software1
OSV
OSV
added 2025/01/27 6:15 p.m.4 views

DEBIAN-CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

8.8CVSS9.6AI score0.49088EPSS
Exploits10References1
NVD
NVD
added 2025/01/27 6:15 p.m.20 views

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

8.8CVSS0.49088EPSS
Exploits10References3
OSV
OSV
added 2025/01/27 6:15 p.m.0 views

UBUNTU-CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

8.8CVSS7.9AI score0.49088EPSS
Exploits10References4
AlpineLinux
AlpineLinux
added 2025/01/27 5:15 p.m.2 views

CVE-2024-54146

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of hosttemplates.php using the graphtemplate parameter. This vulnerability is fixed in 1.2.29...

8.8CVSS7AI score0.37329EPSS
Exploits1References2
OSV
OSV
added 2025/01/27 5:15 p.m.2 views

DEBIAN-CVE-2024-54146

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of hosttemplates.php using the graphtemplate parameter. This vulnerability is fixed in 1.2.29...

8.8CVSS5.7AI score0.37329EPSS
Exploits1References1
OSV
OSV
added 2025/01/27 5:15 p.m.0 views

UBUNTU-CVE-2024-54146

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of hosttemplates.php using the graphtemplate parameter. This vulnerability is fixed in 1.2.29...

8.8CVSS5.9AI score0.37329EPSS
Exploits1References4
AlpineLinux
AlpineLinux
added 2025/01/27 5:12 p.m.14 views

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

8.8CVSS7.8AI score0.49088EPSS
Exploits10References2
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.6 views

Cacti 安全漏洞

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, uses RRDtool to draw graphs for analysis, and provides data and user management features. A security vulnerability exists in Cacti that stems from an authenticated...

8.8CVSS9.4AI score0.49088EPSS
Exploits10References2
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.2 views

Cacti SQL注入漏洞

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from a SQL injection vulnerability that stems from improper...

8.8CVSS7.6AI score0.37329EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/01/26 12:0 a.m.5 views

PT-2025-1312

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.29 Description Cacti is an open source performance and fault management framework. An authenticated user can abuse the graph creation and graph template functionality, which is linked to the improper handling of lin...

8.8CVSS8.1AI score0.49088EPSS
Exploits10References31
RedhatCVE
RedhatCVE
added 2025/01/21 2:21 p.m.6 views

CVE-2024-57934

A flaw was found in the Kernel Function Graph Tracer module in the Linux kernel. A race condition between checking and updating the fgrapharray can cause a NULL pointer dereference, causing a crash and resulting in a denial of service...

5.5CVSS6.2AI score0.00159EPSS
Exploits0References4
OSV
OSV
added 2025/01/21 12:15 p.m.0 views

UBUNTU-CVE-2024-57934

In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READONCE when accessing fgrapharray In ftracereturntohandler, a loop iterates over the fgrapharray elements, which are fgraphops. The loop checks if an element is a fgraphstub to prevent using a fgraphstub afterward...

4.7CVSS6.2AI score0.00159EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2025/01/21 12:1 p.m.2 views

CVE-2024-57934 fgraph: Add READ_ONCE() when accessing fgraph_array[]

In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READONCE when accessing fgrapharray In ftracereturntohandler, a loop iterates over the fgrapharray elements, which are fgraphops. The loop checks if an element is a fgraphstub to prevent using a fgraphstub afterward...

6.1AI score0.00159EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/21 12:0 a.m.3 views

The vulnerability of the Apache HugeGraph graph database server lies in the ability to bypass authentication by using data that is assumed to be unchangeable. This allows attackers to execute arbitrary code.

The vulnerability of the Apache HugeGraph graph database server relates to bypassing authentication using data that is assumed to be unchangeable. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.69651EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:0 a.m.3 views

The vulnerability of the GraphQL Mutation Handler component of the software platform based on git for collaborative code development on GitLab allows a hacker to gain unauthorized access to protected information.

The vulnerability of the GraphQL Mutation Handler component in the software platform based on Git, which is used for collaborative code development in GitLab, involves the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized...

4CVSS5.5AI score0.00212EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.8 views

PT-2026-4476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel's netfilter module contains an issue within the nf tables component related to chain validation. The vulnerability can lead to CPU soft lock-ups during nft chain validat...

5.5CVSS5.4AI score0.00164EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-37974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's trace/fgraph subsystem. A warning occurred during testing on version 6.16 due to a missing unregistration of a notifier callback after a failed start...

5.5CVSS6.2AI score0.00135EPSS
Exploits0
Rows per page
Query Builder