Fedora: Security Advisory for cacti-spine (FEDORA-2020-70fa57d566)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for cacti-spine (FEDORA-2020-c1745db1aa)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

cacti -- XSS exposure

Cacti developer reports: Lack of escaping of color items can lead to XSS exposure...

Fedora 31 : cacti / cacti-spine (2020-c1745db1aa)

Update to 1.2.11 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.11 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 30 : cacti / cacti-spine (2020-70fa57d566)

Update to 1.2.11 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.11 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] Fedora 30 Update: cacti-1.2.11-1.fc30

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

[SECURITY] Fedora 30 Update: cacti-spine-1.2.11-1.fc30

Spine is a supplemental poller for Cacti that makes use of pthreads to achi eve excellent performance...

[SECURITY] Fedora 31 Update: cacti-spine-1.2.11-1.fc31

Spine is a supplemental poller for Cacti that makes use of pthreads to achi eve excellent performance...

[SECURITY] Fedora 31 Update: cacti-1.2.11-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

Exploit for OS Command Injection in Cacti

The official exploit for Cacti v1.2.8 Remote Code Execution CVE-2020-8813...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting XSS. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...

SQL Injection

cacti is vulnerable to SQL injection. Multiple SQL injection flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could use these flaws to execute arbitrary SQL queries...

OS Command Injection

cacti is vulnerable to OS command injection. Multiple command injection flaws were discovered in Cacti. An authenticated user with certain administrative privileges could use these flaws to execute arbitrary commands on the Cacti server with the privileges of the web server user...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting XSS. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting XSS. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...

SQL Injection

cacti is vulnerable to SQL injection. Multiple SQL injection flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could use these flaws to execute arbitrary SQL queries...

Cross-Site Scripting (XSS)

cacti is vulnerable to cross-site scripting. Multiple cross-site scripting XSS flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages...

FreeBSD : cacti -- multiple vulnerabilities (e2b564fc-7462-11ea-af63-38d547003487)

The Cacti developers reports : When guest users have access to realtime graphs, remote code could be executed CVE-2020-8813. Lack of escaping on some pages can lead to XSS exposure CVE-2020-7106. Remote Code Execution due to input validation failure in Performance Boost Debug Log CVE-2020-7237. C...

GLSA-202003-40 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-40 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could execute arbitrary code or bypass...

Cacti: Multiple vulnerabilities

Background Cacti is a complete frontend to rrdtool. Description Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact Remote attackers could execute arbitrary code or bypass intended access restrictions. Workaround There is ...