https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:40:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05530 bdu:2023-05530 https://cve.radiocsirt.org/vuln/bdu:2023-05530 https://cve.radiocsirt.org/vuln/cleanstart-2024-dy69815 <p><strong>Affected:</strong> CleanStart: cacti</p> <p>Security vulnerability affects the cacti package. Cacti is an open source operational monitoring and fault management framework.</p> <p><strong>Affected:</strong> CleanStart: cacti</p> <p>Security vulnerability affects the cacti package. Cacti is an open source operational monitoring and fault management framework.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-dy69815 https://cve.radiocsirt.org/vuln/euvd-2026-216700 EUVD-2026-216700 https://cve.radiocsirt.org/vuln/euvd-2026-216700 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39359 <p>Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `graphs.php` file. When dealing with the cases of ajax_hosts and ajax_hosts_noany, if the `site_id` parameter is greater than 0, it is directly reflected in the WHERE clause of the SQL statement. This creates an SQL injection vulnerability. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `graphs.php` file. When dealing with the cases of ajax_hosts and ajax_hosts_noany, if the `site_id` parameter is greater than 0, it is directly reflected in the WHERE clause of the SQL statement. This creates an SQL injection vulnerability. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-39359 https://cve.radiocsirt.org/vuln/gsd-2023-39359 gsd-2023-39359 https://cve.radiocsirt.org/vuln/gsd-2023-39359 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0275-1 <p>Security update for cacti, cacti-spine</p> <p>Security update for cacti, cacti-spine</p> https://cve.radiocsirt.org/vuln/opensuse-su-2023:0275-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39359 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti</p> <p>Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `graphs.php` file. When dealing with the cases of ajax_hosts and ajax_hosts_noany, if the `site_id` parameter is greater than 0, it is directly reflected in the WHERE clause of the SQL statement. This creates an SQL injection vulnerability. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti</p> <p>Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `graphs.php` file. When dealing with the cases of ajax_hosts and ajax_hosts_noany, if the `site_id` parameter is greater than 0, it is directly reflected in the WHERE clause of the SQL statement. This creates an SQL injection vulnerability. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39359 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2275 <p>Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2275