Lucene search
+L

304 matches found

Tenable Nessus
Tenable Nessus
added 2020/03/02 12:0 a.m.30 views

Debian DLA-2131-2 : rrdtool regression update

It was discovered that there was a regression in a previous fix, which resulted in the following error : ERROR: cannot compile regular expression: Error while compiling regular expression ^?:^%+|%%%+- 0?0-9.0-9+?leEfF%s?:^%+|%%$ at char 18: range out of order in character class ^?:^%+|%%%+-...

7.5CVSS7.1AI score0.07247EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2020/03/02 12:0 a.m.60 views

Debian: Security Advisory (DLA-2131-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.07247EPSS
Exploits0References3
Debian
Debian
added 2020/03/01 8:41 p.m.134 views

[SECURITY] [DLA 2131-1] rrdtool security update

Package : rrdtool Version : 1.4.8-1.2+deb8u1 CVE ID : CVE-2014-6262 Multiple format string vulnerabilities in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argume...

7.5CVSS7.9AI score0.10912EPSS
Exploits0
Fedora
Fedora
added 2020/02/19 1:54 a.m.30 views

[SECURITY] Fedora 31 Update: cacti-1.2.9-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

9CVSS1.2AI score0.36824EPSS
Exploits3
Fedora
Fedora
added 2020/02/19 1:28 a.m.40 views

[SECURITY] Fedora 30 Update: cacti-1.2.9-1.fc30

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

9CVSS1.2AI score0.36824EPSS
Exploits3
OSV
OSV
added 2020/02/12 2:15 a.m.8 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS8AI score
Exploits0References13
NVD
NVD
added 2020/02/12 2:15 a.m.31 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS8AI score0.07247EPSS
Exploits0References8
OSV
OSV
added 2020/02/12 2:15 a.m.7 views

UBUNTU-CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS6.2AI score0.07247EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2020/02/12 2:15 a.m.29 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS7.4AI score0.07247EPSS
Exploits0References4
Prion
Prion
added 2020/02/12 2:15 a.m.19 views

Format string

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

5CVSS8.1AI score0.10912EPSS
Exploits0References8Affected Software2
CVE
CVE
added 2020/02/12 1:30 a.m.106 views

CVE-2014-6262

CVE-2014-6262 describes multiple format string vulnerabilities in the Python RRDtool module used by Zenoss Core (before 4.2.5) and other products. An attacker can exploit a crafted third argument to rrdtool.graph to execute arbitrary code or cause an application crash (DoS). Related to CVE-2013-2...

7.5CVSS7.9AI score0.07247EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2020/02/12 1:30 a.m.45 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS8.1AI score0.07247EPSS
Exploits0
Cvelist
Cvelist
added 2020/02/12 1:30 a.m.30 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

8AI score0.07247EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.27 views

Fedora Update for cacti FEDORA-2019-362f0e9710

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS6.4AI score0.35041EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2019/12/22 12:0 a.m.40 views

Fedora Update for cacti FEDORA-2019-6bf27b45b3

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS6.4AI score0.35041EPSS
Exploits1References2
Fedora
Fedora
added 2019/12/21 12:57 a.m.32 views

[SECURITY] Fedora 31 Update: cacti-1.2.8-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

8.1CVSS1.2AI score0.35041EPSS
Exploits1
Fedora
Fedora
added 2019/12/20 1:15 a.m.30 views

[SECURITY] Fedora 30 Update: cacti-1.2.8-1.fc30

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

8.1CVSS1.2AI score0.35041EPSS
Exploits1
Kitploit
Kitploit
added 2019/11/12 12:0 p.m.20 views

Cacti - Complete Network Graphing Solution

IMPORTANT When using source or by downloading the code directly from the repository, it is important to run the database upgrade script if you experience any errors referring to missing tables or columns in the database. Changes to the database are committed to the cacti.sql file which is used fo...

7.2AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2019/10/11 6:43 p.m.25 views

Improper Encoding or Escaping of Output and Injection in LibreNMS

An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with mysqlirealescapestring,...

8.8CVSS2.3AI score0.01392EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2019/10/11 6:43 p.m.37 views

GHSA-W5R2-GVGF-MPM8 Improper Encoding or Escaping of Output and Injection in LibreNMS

An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with mysqlirealescapestring,...

8.8CVSS9.6AI score0.01392EPSS
Exploits1References2
Rows per page
Query Builder