Lucene search
+L

3412 matches found

securityvulns
securityvulns
added 2015/07/05 12:0 a.m.88 views

[SECURITY] [DSA 3295-1] cacti security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3295-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 24, 2015 https://www.debian.org/security/faq -...

7.5CVSS1.4AI score0.03227EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/06/29 12:0 a.m.45 views

Debian DLA-255-1 : cacti security update

Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. We recommend that you upgrade your cacti packages. CVE-2015-2665 Cross-site scripting XSS vulnerability in Cacti before 0.8.8d allows remote attackers ...

7.5CVSS8.2AI score0.03227EPSS
SaveExploits0References5
Debian
Debian
added 2015/06/27 11:9 a.m.34 views

[SECURITY] [DLA 255-1] cacti security update

Package : cacti Version : 0.8.7g-1+squeeze6 CVE ID : CVE-2015-2665 CVE-2015-4342 CVE-2015-4454 Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. We recommend that you upgrade your cacti packages...

7.5CVSS8.5AI score0.03227EPSS
SaveExploits0
OSV
OSV
added 2015/06/27 12:0 a.m.31 views

DLA-255-1 cacti - security update

Bulletin has no description...

7.5CVSS8.6AI score0.03227EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/06/25 12:0 a.m.29 views

openSUSE Security Update : cacti (openSUSE-2015-445)

cacti was updated to 0.8.8d to fix multiple security issues and bugs. The following vulnerabilities were fixed : - SQL injection VN: JVN78187936 / TN:JPCERT98968540 - Cacti Cross-Site Scripting Vulnerability Notification FG-VD-15-017 - SQL Injection and Location header injection from cdef id...

7.5CVSS8.2AI score0.03227EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/06/25 12:0 a.m.31 views

Debian DSA-3295-1 : cacti - security update

Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

7.5CVSS7.9AI score0.03227EPSS
SaveExploits0References7
Debian
Debian
added 2015/06/24 6:48 p.m.31 views

[SECURITY] [DSA 3295-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3295-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 24, 2015 https://www.debian.org/security/faq -...

7.5CVSS2.5AI score0.03227EPSS
SaveExploits0
Debian
Debian
added 2015/06/24 6:48 p.m.50 views

[SECURITY] [DSA 3295-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3295-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 24, 2015 https://www.debian.org/security/faq -...

7.5CVSS6.6AI score0.03227EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2015/06/24 12:0 a.m.30 views

Debian Security Advisory DSA 3295-1 (cacti - security update)

Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. OpenVAS Vulnerability Test $Id: deb3295.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3295-1 using nvtgen 1.0 Script...

7.5CVSS0.03227EPSS
SaveExploits0References1
OSV
OSV
added 2015/06/24 12:0 a.m.21 views

DSA-3295-1 cacti - security update

Bulletin has no description...

7.5CVSS8.6AI score0.03227EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/06/23 12:0 a.m.29 views

FreeBSD : cacti -- Multiple XSS and SQL injection vulnerabilities (a3929112-181b-11e5-a1cf-002590263bf5)

The Cacti Group, Inc. reports : Important Security Fixes - Multiple XSS and SQL injection vulnerabilities Changelog - bug: Fixed SQL injection VN: JVN78187936 / TN:JPCERT98968540 - bug0002542: FG-VD-15-017 Cacti Cross-Site Scripting Vulnerability Notification - bug0002571: SQL Injection and...

7.5CVSS8.2AI score0.03227EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2015/06/23 12:0 a.m.34 views

FreeBSD : cacti -- multiple security vulnerabilities (a0e74731-181b-11e5-a1cf-002590263bf5)

The Cacti Group, Inc. reports : Important Security Fixes - CVE-2013-5588 - XSS issue via installer or device editing - CVE-2013-5589 - SQL injection vulnerability in device editing - CVE-2014-2326 - XSS issue via CDEF editing - CVE-2014-2327 - Cross-site request forgery CSRF vulnerability -...

7.5CVSS8AI score0.03543EPSS
SaveExploits7References12
OpenVAS
OpenVAS
added 2015/06/23 12:0 a.m.27 views

Debian: Security Advisory (DSA-3295-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.03227EPSS
SaveExploits0References3
CNVD
CNVD
added 2015/06/18 12:0 a.m.4 views

Cacti SQL Injection Vulnerability (CNVD-2015-03938)

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. The tool through snmpget to obtain data , using RRDtool drawing graphs to analyze , and provide data and user management features . A SQL injection vulnerability exists in versions prior to Cacti...

7.5CVSS8AI score0.03227EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/06/18 12:0 a.m.7 views

Cacti Cross-Site Scripting Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools. Cacti suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

4.3CVSS6AI score0.02158EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/06/18 12:0 a.m.5 views

Cacti 'get_hash_graph_template' function SQL injection vulnerability

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. The tool through snmpget to obtain data , using RRDtool drawing graphs to analyze , and provide data and user management features . A SQL injection vulnerability exists in the 'gethashgraphtemplate...

7.5CVSS8.4AI score0.02252EPSS
SaveExploits0References1
NVD
NVD
added 2015/06/17 6:59 p.m.18 views

CVE-2015-4454

SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...

7.5CVSS9.1AI score0.02252EPSS
SaveExploits0References7
OSV
OSV
added 2015/06/17 6:59 p.m.7 views

CVE-2015-4454

SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...

9.1AI score
SaveExploits0References8
OSV
OSV
added 2015/06/17 6:59 p.m.4 views

DEBIAN-CVE-2015-4454

SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...

7.5CVSS8.8AI score0.02252EPSS
SaveExploits0References1
NVD
NVD
added 2015/06/17 6:59 p.m.23 views

CVE-2015-4342

SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id...

7.5CVSS9AI score0.03227EPSS
SaveExploits0References13
Rows per page
Query Builder