Lucene search
+L

3411 matches found

Positive Technologies
Positive Technologies
added 2023/11/13 12:0 a.m.6 views

PT-2023-8110 · Cacti +1 · Cacti +1

Name of the Vulnerable Software and Affected Versions: Cacti version 1.2.25 Description: The issue is related to insufficient protection of the web page structure in the Cacti network monitoring tool. This allows a remote attacker to conduct cross-site scripting attacks and gain unauthorized acce...

8.8CVSS6.2AI score0.84628EPSS
SaveExploits13References65
OpenVAS
OpenVAS
added 2023/11/09 12:0 a.m.23 views

Debian: Security Advisory (DSA-5550-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.87688EPSS
SaveExploits15References4
Tenable Nessus
Tenable Nessus
added 2023/11/09 12:0 a.m.81 views

Debian DSA-5550-1 : cacti - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5550 advisory. Multiple security vulnerabilities have been discovered in Cacti, a web interface for graphing of monitoring systems, which could result in cross-site...

9.8CVSS6.9AI score0.87688EPSS
SaveExploits19References30
Debian
Debian
added 2023/11/08 10:40 p.m.154 views

[SECURITY] [DSA 5550-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5550-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 08, 2023 https://www.debian.org/security/faq -...

9.8CVSS7.9AI score0.87688EPSS
SaveExploits19
Positive Technologies
Positive Technologies
added 2023/11/08 12:0 a.m.10 views

PT-2024-10: Cross-Site Scripting (DOM-based XSS) in Cacti

The vulnerability was identified in Cacti version 1.2.26 and below. It allows to bypass an earlier patch CVE-2023-39360. The vulnerability leads to a cross-site scripting attack XSS DOM-based. The vulnerability can be exploited by an authorized user and leads to the possibility of executing...

6.1CVSS6.5AI score0.01481EPSS
SaveExploits2References1
OSV
OSV
added 2023/11/08 12:0 a.m.57 views

DSA-5550-1 cacti - security update

Bulletin has no description...

9.8CVSS6.3AI score0.87688EPSS
SaveExploits14
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:0 a.m.45 views

Fedora 39 : cacti / cacti-spine (2023-248dff7cbe)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-248dff7cbe advisory. Update cacti and cacti-spine to version 1.2.25. This includes the upstream fixes for many CVEs...

9.8CVSS6.7AI score0.87688EPSS
SaveExploits24References19
OpenVAS
OpenVAS
added 2023/11/05 12:0 a.m.26 views

Fedora: Security Advisory for cacti (FEDORA-2023-248dff7cbe)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.5AI score0.87688EPSS
SaveExploits24References2
OpenVAS
OpenVAS
added 2023/11/05 12:0 a.m.26 views

Fedora: Security Advisory (FEDORA-2023-248dff7cbe)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.5AI score0.87688EPSS
SaveExploits24References21
Fedora
Fedora
added 2023/11/03 6:53 p.m.36 views

[SECURITY] Fedora 39 Update: cacti-spine-1.2.25-1.fc39

Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance...

9.8CVSS6.4AI score0.87688EPSS
SaveExploits24
Fedora
Fedora
added 2023/11/03 6:53 p.m.44 views

[SECURITY] Fedora 39 Update: cacti-1.2.25-1.fc39

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

9.8CVSS6.9AI score0.87688EPSS
SaveExploits24
SUSE CVE
SUSE CVE
added 2023/10/31 2:18 a.m.6 views

SUSE CVE-2023-46490

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the formactions function in the managers.php function...

6.5CVSS7.7AI score0.01412EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/10/27 10:15 p.m.5 views

CVE-2023-46490

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the formactions function in the managers.php function...

6.5CVSS6AI score0.01412EPSS
SaveExploits1References3
NVD
NVD
added 2023/10/27 10:15 p.m.24 views

CVE-2023-46490

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the formactions function in the managers.php function...

6.5CVSS6.6AI score0.01412EPSS
SaveExploits1References2
OSV
OSV
added 2023/10/27 10:15 p.m.2 views

DEBIAN-CVE-2023-46490

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the formactions function in the managers.php function...

6.5CVSS6.8AI score0.01412EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2023/10/27 10:15 p.m.16 views

CVE-2023-46490

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the formactions function in the managers.php function...

6.5CVSS6.8AI score0.01412EPSS
SaveExploits1References4
Prion
Prion
added 2023/10/27 10:15 p.m.22 views

Sql injection

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the formactions function in the managers.php function...

4CVSS6.6AI score0.01412EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/10/27 10:15 p.m.5 views

UBUNTU-CVE-2023-46490

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the formactions function in the managers.php function...

6.5CVSS6AI score0.01412EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/10/27 12:0 a.m.4 views

Cacti SQL Injection Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A SQL injection vulnerability exists in Cacti v1.2.25, which stems from...

6.5CVSS7.7AI score0.01412EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/10/27 12:0 a.m.13 views

CVE-2023-46490

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the formactions function in the managers.php function...

7.8AI score0.01412EPSS
SaveExploits1References2
Rows per page
Query Builder