393 matches found
CVE-2010-1302
CVE-2010-1302 describes a directory traversal vulnerability in Joomla! component com_dwgraphs (DW Graphs) 1.0, where an attacker can read arbitrary server files via directory traversal in the controller parameter to index.php. The connected nuclei template confirms the flaw and indicates practica...
Fedora Core 11 FEDORA-2009-12575 (cacti)
The remote host is missing an update to cacti announced via advisory FEDORA-2009-12575. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora 11 : cacti-0.8.7e-3.fc11 (2009-12575)
This fix contains several official patches from cacti: Command Line Add Graphs Syntax SNMP Invalid Responses Template Import/Export Duplication Cross-Site Scripting Fixes http://www.cacti.net/downloadpatches.php Note that Tenable Network Security has extracted the preceding description block...
Cacti 0.8.7e Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Cacti 0.8.7e and earlier versions are affected by multiple security issues. Issues 1-4 are cross site scripting issues, issue 5 is a priviledge escalation issue. 1. XSS 1 A HTTP GET request against the following URL will, on a web browser with...
CVE-2009-3441
Open Source Security Information Management OSSIM before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to 1 graphs/alarmsevents.php or 2 host/drawtree.php...
Authentication flaw
Open Source Security Information Management OSSIM before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to 1 graphs/alarmsevents.php or 2 host/drawtree.php...
CVE-2009-3441
Open Source Security Information Management OSSIM before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to 1 graphs/alarmsevents.php or 2 host/drawtree.php...
[SECURITY] Fedora 7 Update: cacti-0.8.7b-1.fc7
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...
[SECURITY] Fedora 7 Update: graphviz-2.12-10.fc7
A collection of tools for the manipulation and layout of graphs as in nodes and edges, not as in barcharts...
Debian: Security Advisory (DSA-764-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 7 Update: cacti-0.8.7a-1.fc7
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...
DEBIAN-CVE-2007-0510
Multiple buffer overflows in 1 graphs.c, 2 output.c, and 3 preserve.c in AWFFull 3.7.1 and earlier have unknown impact and attack vectors. NOTE: some of these details are obtained from third party information. NOTE: There may not be any attack vector that crosses privilege boundaries...
security flaw
Unknown vulnerability in the 1 AgentX dissector, 2 PER dissector, 3 DOCSIS dissector, 4 SCTP graphs, 5 HTTP dissector, 6 DCERPC, 7 DHCP, 8 RADIUS dissector, 9 Telnet dissector, 10 IS-IS LSP dissector, or 11 NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial...