7.3 enhancement update

An update is available for php-pear, php-pecl-rrd, php-pecl-apcu, php-pecl-xdebug, libzip, php-pecl-zip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For...

DEBIAN-CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

Moderate: Red Hat Security Advisory: collectd security, bug fix, and enhancement update

An update for collectd is now available for RHEV 4.X RHEV-H and Agents for RHEL-7 and RHEV Engine version 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Electric Sheep Fencing pfSense 'graph' Parameter Command Execution Vulnerability

Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A security vulnerability exists in Electric Sheep Fencing pfSense versions prior to 2.3. A remote attacker can exploit this vulnerability by sending the 'graph' paramet...

[SECURITY] Fedora 26 Update: collectd-5.8.0-2.fc26

collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...

CVE-2017-16641

CVE-2017-16641 affects Cacti 1.1.27 where lib/rrd.php allows remote authenticated administrators to execute arbitrary OS commands via path_rrdtool in an action=save to settings.php. Various advisories confirm this flaw and classify its impact as high (arbitrary command execution) with remote acce...

[SECURITY] Fedora 24 Update: collectd-5.6.2-1.fc24

collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...

[SECURITY] Fedora 25 Update: collectd-5.7.1-3.fc25

collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...

[SECURITY] Fedora 26 Update: collectd-5.7.1-3.fc26

collectd is a daemon which collects system performance statistics periodica lly and provides mechanisms to store the values in a variety of ways, for example in RRD files...

[SECURITY] Fedora 23 Update: collectd-5.5.2-1.fc23

collectd is a small daemon written in C for performance. It reads various system statistics and updates RRD files, creating them if necessary. Since the daemon doesn't need to startup every time it wants to update the files it's very fast and easy on the system. Also, the statistics are very fine...

Collectd-Web 0.4.0 Cross Site Scripting

Title -Collectd-web XSS Exploit Title : XSS Vulnerabilitie in Collectd-web Date: Sun May 22 11:55:36 EDT 2016 Reported Date : Sun May 22 11:55:36 EDT 2016 Vendor Homepage: https://collectd.org/wiki/index.php/Collectd-web Version: Version: 0.4.0 Software Link: https://github.com/httpdss/collectd-w...

[SECURITY] Fedora 20 Update: pnp4nagios-0.6.22-2.fc20

PNP is an addon to nagios which analyzes performance data provided by plugi ns and stores them automatically into RRD-databases...

[SECURITY] Fedora 19 Update: pnp4nagios-0.6.22-2.fc19

PNP is an addon to nagios which analyzes performance data provided by plugi ns and stores them automatically into RRD-databases...

Network Weathermap 0.97a (editor.php) - Persistent XSS

No description provided by source. Network Weathermap 0.97a - Persistent XSS Earlier versions are also possibly vulnerable. INFORMATION Product: Network Weathermap 0.97a Remote-exploit: yes Vendor-URL: http://www.network-weathermap.com/ Discovered by: Daniel Ricardo dos Santos CVE Request -...

PHP RRD Browser 0.2 P Parameter Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22520/info php rrd browser is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve the contents of arbitrary files...

CVE-2014-2709

lib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified parameters...

[SECURITY] Fedora 18 Update: graphite-web-0.9.12-1.fc18

Graphite consists of a storage backend and a web-based visualization fronte nd. Client applications send streams of numeric time-series data to the Graphite backend called carbon, where it gets stored in fixed-size database files similar in design to RRD. The web frontend provides user interfaces...

[SECURITY] Fedora 19 Update: graphite-web-0.9.12-1.fc19

Graphite consists of a storage backend and a web-based visualization fronte nd. Client applications send streams of numeric time-series data to the Graphite backend called carbon, where it gets stored in fixed-size database files similar in design to RRD. The web frontend provides user interfaces...

DEBIAN-CVE-2013-1435

1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2013-1435

1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...