CVE-2020-22345

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabasepath parameter...

new module: php:7.4

An update is available for php-pear, php-pecl-rrd, php, php-pecl-apcu, php-pecl-xdebug, libzip, php-pecl-zip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Thi...

CVE-2020-13252

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabasestatuspath via a main.get.php request and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page...

Design/Logic Flaw

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabasestatuspath via a main.get.php request and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page...

CVE-2020-13252

Centreon CVE-2020-13252 affects Centreon prior to version 19.04.15. The vulnerability is a command injection in RRDdatabase_status_path, exploitable by remote attackers who supply shell metacharacters in a request parameter to main.get.php and then load include/views/graphs/graphStatus/displaySer...

7.3 enhancement update

An update is available for php-pear, php-pecl-rrd, php-pecl-apcu, php-pecl-xdebug, libzip, php-pecl-zip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For...

DEBIAN-CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

Moderate: Red Hat Security Advisory: collectd security, bug fix, and enhancement update

An update for collectd is now available for RHEV 4.X RHEV-H and Agents for RHEL-7 and RHEV Engine version 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Electric Sheep Fencing pfSense 'graph' Parameter Command Execution Vulnerability

Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A security vulnerability exists in Electric Sheep Fencing pfSense versions prior to 2.3. A remote attacker can exploit this vulnerability by sending the 'graph' paramet...

[SECURITY] Fedora 26 Update: collectd-5.8.0-2.fc26

collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...

CVE-2017-16641

CVE-2017-16641 affects Cacti 1.1.27 where lib/rrd.php allows remote authenticated administrators to execute arbitrary OS commands via path_rrdtool in an action=save to settings.php. Various advisories confirm this flaw and classify its impact as high (arbitrary command execution) with remote acce...

[SECURITY] Fedora 24 Update: collectd-5.6.2-1.fc24

collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...

[SECURITY] Fedora 25 Update: collectd-5.7.1-3.fc25

collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...

[SECURITY] Fedora 26 Update: collectd-5.7.1-3.fc26

collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...

[SECURITY] Fedora 23 Update: collectd-5.5.2-1.fc23

collectd is a small daemon written in C for performance. It reads various system statistics and updates RRD files, creating them if necessary. Since the daemon doesn't need to startup every time it wants to update the files it's very fast and easy on the system. Also, the statistics are very fine...

Collectd-Web 0.4.0 Cross Site Scripting

Title -Collectd-web XSS Exploit Title : XSS Vulnerabilitie in Collectd-web Date: Sun May 22 11:55:36 EDT 2016 Reported Date : Sun May 22 11:55:36 EDT 2016 Vendor Homepage: https://collectd.org/wiki/index.php/Collectd-web Version: Version: 0.4.0 Software Link: https://github.com/httpdss/collectd-w...

[SECURITY] Fedora 20 Update: pnp4nagios-0.6.22-2.fc20

PNP is an addon to nagios which analyzes performance data provided by plugi ns and stores them automatically into RRD-databases...

[SECURITY] Fedora 19 Update: pnp4nagios-0.6.22-2.fc19

PNP is an addon to nagios which analyzes performance data provided by plugi ns and stores them automatically into RRD-databases...

PHP RRD Browser 0.2 P Parameter Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22520/info php rrd browser is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve the contents of arbitrary files...

Network Weathermap 0.97a (editor.php) - Persistent XSS

No description provided by source. Network Weathermap 0.97a - Persistent XSS Earlier versions are also possibly vulnerable. INFORMATION Product: Network Weathermap 0.97a Remote-exploit: yes Vendor-URL: http://www.network-weathermap.com/ Discovered by: Daniel Ricardo dos Santos CVE Request -...