Several SQL injection vulnerabilities have been discovered in Cacti, an
RRDTool frontend written in PHP. Specially crafted input can be used by
an attacker in the rra_id value of the graph.php script to execute
arbitrary SQL commands on the database.
Intelligence View
⚡ tsecurity.de Intelligence
DSA-3423 cacti - security update
Several SQL injection vulnerabilities have been discovered in Cacti, an RRDTool frontend written in PHP. Specially crafted input can be used by an attacker in…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwant Story Cluster & Sources (vector AI)
14 Bronnen
Stored Cross-Site Scripting in YITH WooCommerce Wishlist Move-to-Wishlist Popup
13 andere bronnen
VVulnerability definition fe…5 uur geledenStored Cross-Site Scripting in WordPress Personal Data Request Screens VVulnerability definition fe…5 uur geledenStored Cross-Site Scripting in ElementsKit Simple Tab Widget VVulnerability definition fe…5 uur geledenReflected Cross-Site Scripting in UpdraftPlus Restore Page VVulnerability definition fe…5 uur geledenStored Cross-Site Scripting in Ultimate Addons for Elementor Navigation Menu Icons VVulnerability definition fe…5 uur geledenAuthenticated (Contributor+) Stored Cross-Site Scripting via WordPress Block Delimiter Whitespace VVulnerability definition fe…5 uur geledenStored Cross-Site Scripting in WordPress Interactivity API Object Bindings
+7
13 Bronnen
CVE-2026-82632 | GitLab up to 19.2.7/19.3.4/19.4.1 Import improper authorization (WID-SEC-2026-3858)
12 andere bronnen
VVulDB Updates1 uur geledenCVE-2026-9268 | GitLab up to 19.2.7/19.3.4/19.4.1 CI/CD Deployment Rollback Settings privileges management (WID-SEC-2026-3858) VVulDB Updates2 uur geledenCVE-2026-105458 | GitLab up to 19.2.7/19.3.4/19.4.1 Duo Agent Platform permission (WID-SEC-2026-3858) VVulDB Updates2 uur geledenCVE-2026-104661 | GitLab up to 19.2.7/19.3.4/19.4.1 Compliance Pipeline permission (WID-SEC-2026-3858) VVulDB Updates2 uur geledenCVE-2026-14552 | GitLab up to 19.2.7/19.3.4/19.4.1 Epic improper authorization (WID-SEC-2026-3858) VVulDB Updates2 uur geledenCVE-2026-14814 | GitLab up to 19.2.7/19.3.4/19.4.1 CI/CD Pipeline input validation (WID-SEC-2026-3858) VVulDB Updates2 uur geledenCVE-2026-16275 | GitLab up to 19.2.7/19.3.4/19.4.1 improper authorization (WID-SEC-2026-3858)
+6
8 Bronnen
CVE-2026-115943 | Spreadsheet::XLSX up to 0.18 ExcelFmt os command injection (EUVD-2026-113403)
7 andere bronnen
VVulDB Updates1 uur geledenCVE-2026-51832 | IDrive Backup up to 7.0.1.1 id_service.exe os command injection (EUVD-2026-113367) VVulDB Updates1 uur geledenCVE-2026-51831 | IDrive Backup for Windows up to 7.0.1.1 id_service.exe os command injection (EUVD-2026-113368) VVulDB Updates33 min. geledenCVE-2022-48124 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting setOpenVpnCertGenerationCfg FileName command injection (EUVD-2022-50836) VVulDB Updates33 min. geledenCVE-2022-48126 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting setOpenVpnCertGenerationCfg username command injection (EUVD-2022-50838) VVulDB Updates33 min. geledenCVE-2022-48125 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting setOpenVpnCertGenerationCfg password command injection (EUVD-2022-50837) VVulDB Updates3 uur geledenCVE-2024-45257 | BYOB 2.0 Payload Build Page core/generators.py build command injection
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/2535/unix-linux-servers/dsa-3423-cacti-security-update/