Most recent entries from all

EUVD-2026-124521

fkie_cve-2009-4032

Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.

GHSA-2chx-2wx9-x7f6

gsd-2009-4032

jvndb-2009-003901

Cacti is a web application that graphs stored data collected from network devices. Cacti contains a cross-site scripting vulnerability (CWE-79) due to a flaw in processing parameters in graph_view.php. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

RHSA-2010:0635 — Red Hat Security Advisory: Red Hat High Performance Computing (HPC) Solution 5.5

The Red Hat High Performance Computing (HPC) Solution version 5.5 for Red Hat Enterprise Linux 5.5, or RHHPC 5.5, is now available, fixing multiple security issues, multiple bugs, and adding several enhancements.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.