Lucene search
+L

26 matches found

SUSE CVE
SUSE CVE
added 2024/05/15 2:32 a.m.7 views

SUSE CVE-2024-25641

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web...

7.2CVSS7.7AI score0.86303EPSS
SaveExploits17References5
OSV
OSV
added 2024/05/14 3:5 p.m.4 views

DEBIAN-CVE-2024-25641

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web...

7.2CVSS9.3AI score0.86303EPSS
SaveExploits17References1
OSV
OSV
added 2024/05/14 3:5 p.m.5 views

UBUNTU-CVE-2024-25641

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web...

9.1CVSS7.7AI score0.86303EPSS
SaveExploits17References5
Vulnrichment
Vulnrichment
added 2024/05/13 1:28 p.m.112 views

CVE-2024-25641 Cacti RCE vulnerability when importing packages

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web...

9.1CVSS7.5AI score0.86303EPSS
SaveExploits17References4
Cvelist
Cvelist
added 2024/05/13 1:28 p.m.46 views

CVE-2024-25641 Cacti RCE vulnerability when importing packages

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web...

9.1CVSS9.6AI score0.86303EPSS
SaveExploits17References4
OSV
OSV
added 2022/12/14 12:15 a.m.7 views

CVE-2022-40264

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user import a project package...

7.1CVSS5.9AI score0.00299EPSS
SaveExploits0References4
Rows per page
Query Builder