Vulnerabilidades em Cacti
60 resultadosCVE-2024-31459HIGHCacti RCE vulnerability by file include in lib/plugin.phpEPSS 2.7%CVE-2023-30534MEDIUMInsecure Deserialization in CactiEPSS 2.6%CVE-2024-31460MEDIUMCacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in databaseEPSS 1.8%CVE-2023-39358HIGHAuthenticated SQL injection vulnerability in reports_user.php in CactiEPSS 1.7%CVE-2023-39359HIGHAuthenticated SQL injection vulnerability in graphs.php in CactiEPSS 1.7%CVE-2023-39357HIGHA Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in CactiEPSS 1.5%CVE-2023-49086MEDIUMCacti is vulnerable to cross-Site scripting (XSS) DOMEPSS 1.5%CVE-2023-50250MEDIUMCross-Site Scripting vulnerability when Import xml template fileEPSS 1.3%CVE-2023-49088MEDIUMCacti has incomplete fix for CVE-2023-39515EPSS 1.3%CVE-2024-34340CRITICALAuthentication Bypass when using using older password hashesEPSS 1.1%CVE-2026-40079HIGHCacti: Command Injection via escape_command() no-op in RRDtool executionEPSS 1.1%CVE-2024-27082HIGHCacti Cross-site Scripting vulnerability when managing treesEPSS 0.9%CVE-2024-29894MEDIUMCacti Cross-site Scripting vulnerability when using JavaScript based messaging APIEPSS 0.9%CVE-2023-39365MEDIUMUnchecked regular expressions can lead to SQL Injection and data leakage in CactiEPSS 0.9%CVE-2024-31443MEDIUMCacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in databaseEPSS 0.8%CVE-2023-39513MEDIUMStored Cross-site Scripting on host.php verbose data-query debug view in CactiEPSS 0.8%CVE-2023-39360MEDIUMReflected Cross-site Scripting in graphs_new.php in CactiEPSS 0.8%CVE-2023-39366MEDIUMStored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in CactiEPSS 0.8%CVE-2023-39514MEDIUMStored Cross-site Scripting on graphs.php data template formated name view in CactiEPSS 0.7%CVE-2023-39510MEDIUMStored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in CactiEPSS 0.7%