Amazon Linux AMI : cacti (ALAS-2016-673)

Various cross-site scripting XSS flaws CVE-2013-5588 , CVE-2014-5025 , CVE-2014-5026 and various SQL injection flaws CVE-2013-5589 , CVE-2015-4342 , CVE-2015-4634 , CVE-2015-8377 , CVE-2015-8604 were discovered affecting versions of Cacti prior to 0.8.8g. Cross-site scripting XSS vulnerability in...

Medium: cacti

Issue Overview: Various cross-site scripting XSS flaws CVE-2013-5588, CVE-2014-5025, CVE-2014-5026 and various SQL injection flaws CVE-2013-5589, CVE-2015-4342, CVE-2015-4634, CVE-2015-8377, CVE-2015-8604 were discovered affecting versions of Cacti prior to 0.8.8g. Cross-site scripting XSS...

cacti气象图插件任意文件上传漏洞

No description provided by source...

Debian Security Advisory DSA 3494-1 (cacti - security update)

Two SQL injection vulnerabilities were discovered in cacti, a web interface for graphing of monitoring systems. Specially crafted input can be used by an attacker in parameters of the graphsnew.php script to execute arbitrary SQL commands on the database. OpenVAS Vulnerability Test $Id:...

Debian: Security Advisory (DSA-3494-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : cacti -- multiple vulnerabilities (db3301be-e01c-11e5-b2bd-002590263bf5)

The Cacti Group, Inc. reports : Changelog - bug:0002652: CVE-2015-8604: SQL injection in graphsnew.php - bug:0002655: CVE-2015-8377: SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php - bug:0002656: Authentication using web authentication as a user not in the cacti...

Debian DSA-3494-1 : cacti - security update

Two SQL injection vulnerabilities were discovered in cacti, a web interface for graphing of monitoring systems. Specially crafted input can be used by an attacker in parameters of the graphsnew.php script to execute arbitrary SQL commands on the database. %NASLMINLEVEL 70300 C Tenable Network...

cacti: sql injection

CVE-2015-8604 sql injection SQL injection in graphsnew.php. - CVE-2015-8377 sql injection SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php. - CVE-2015-8369 sql injection SQL injection in graph.php...

[SECURITY] [DSA 3494-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3494-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3494-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3494-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 27, 2016 https://www.debian.org/security/faq -...

DSA-3494-1 cacti - security update

Bulletin has no description...

cacti -- multiple vulnerabilities

The Cacti Group, Inc. reports: Changelog bug:0002652: CVE-2015-8604: SQL injection in graphsnew.php bug:0002655: CVE-2015-8377: SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php bug:0002656: Authentication using web authentication as a user not in the cacti database...

Mageia: Security Advisory (MGASA-2016-0068)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2016-0068 Updated cacti packages fix CVE-2016-2313

Updated cacti package fixes security vulnerability: Authentication using web authentication as a user not in the cacti database allows complete access CVE-2016-2313...

Updated cacti packages fix CVE-2016-2313

Updated cacti package fixes security vulnerability: Authentication using web authentication as a user not in the cacti database allows complete access CVE-2016-2313...

openSUSE Security Update : cacti (openSUSE-2016-199)

cacti was updated to fix the following vulnerabilities : - CVE-2015-8369: SQL injection in graph.php boo958863 - CVE-2015-8604: SQL injection in graphsnew.php boo960678 - CVE-2015-8377: SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php boo958977 - CVE-2016-2313:...

openSUSE Security Update : cacti-spine (openSUSE-2016-202)

cacti-spine was updated to match the cacti version, fixing a number of upstream bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-202. The text description of this plugin is ...

openSUSE Security Update : cacti (openSUSE-2016-198)

cacti was updated to fix the following vulnerabilities : - CVE-2015-8369: SQL injection in graph.php boo958863 - CVE-2015-8604: SQL injection in graphsnew.php boo960678 - CVE-2015-8377: SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php boo958977 - CVE-2016-2313:...

openSUSE Security Update : cacti (openSUSE-2016-201)

cacti was updated to fix the following vulnerabilities : - CVE-2015-8369: SQL injection in graph.php boo958863 - CVE-2015-8604: SQL injection in graphsnew.php boo960678 - CVE-2015-8377: SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php boo958977 - CVE-2016-2313:...

Mageia: Security Advisory (MGASA-2016-0025)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...