Поиск уязвимостей
Количество 8
Количество 8
BDU:2024-04119
Уязвимость функции api_plugin_hook() программного средства мониторинга сети Cacti, позволяющая нарушителю выполнить произвольный код
ROS-20260401-80-0035
Уязвимость cacti
CVE-2024-31459
Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, there is a file inclusion issue in the `lib/plugin.php` file. Combined with SQL injection vulnerabilities, remote code execution can be implemented. There is a file inclusion issue with the `api_plugin_hook()` function in the `lib/plugin.php` file, which reads the plugin_hooks and plugin_config tables in database. The read data is directly used to concatenate the file path which is used for file inclusion. Version 1.2.27 contains a patch for the issue.
CVE-2024-31459
Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, there is a file inclusion issue in the `lib/plugin.php` file. Combined with SQL injection vulnerabilities, remote code execution can be implemented. There is a file inclusion issue with the `api_plugin_hook()` function in the `lib/plugin.php` file, which reads the plugin_hooks and plugin_config tables in database. The read data is directly used to concatenate the file path which is used for file inclusion. Version 1.2.27 contains a patch for the issue.
CVE-2024-31459
Cacti provides an operational monitoring and fault management framewor ...
ALT-PU-2024-14440
ALT-PU-2024-14440: package `cacti` update to version 1.2.28-alt1
openSUSE-SU-2024:0276-1
Security update for cacti, cacti-spine
openSUSE-SU-2024:0274-1
Security update for cacti, cacti-spine
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-04119 Уязвимость функции api_plugin_hook() программного средства мониторинга сети Cacti, позволяющая нарушителю выполнить произвольный код | CVSS3: 8 | 3% Низкий | больше 2 лет назад |
 | ROS-20260401-80-0035 Уязвимость cacti | CVSS3: 8 | 3% Низкий | 7 месяцев назад |
 | CVE-2024-31459 Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, there is a file inclusion issue in the `lib/plugin.php` file. Combined with SQL injection vulnerabilities, remote code execution can be implemented. There is a file inclusion issue with the `api_plugin_hook()` function in the `lib/plugin.php` file, which reads the plugin_hooks and plugin_config tables in database. The read data is directly used to concatenate the file path which is used for file inclusion. Version 1.2.27 contains a patch for the issue. | CVSS3: 7.2 | 3% Низкий | больше 2 лет назад |
 | CVE-2024-31459 Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, there is a file inclusion issue in the `lib/plugin.php` file. Combined with SQL injection vulnerabilities, remote code execution can be implemented. There is a file inclusion issue with the `api_plugin_hook()` function in the `lib/plugin.php` file, which reads the plugin_hooks and plugin_config tables in database. The read data is directly used to concatenate the file path which is used for file inclusion. Version 1.2.27 contains a patch for the issue. | CVSS3: 7.2 | 3% Низкий | больше 2 лет назад |
| CVE-2024-31459 Cacti provides an operational monitoring and fault management framewor ... | CVSS3: 7.2 | 3% Низкий | больше 2 лет назад |
| ALT-PU-2024-14440 ALT-PU-2024-14440: package `cacti` update to version 1.2.28-alt1 | CVSS3: 9.1 | около 2 лет назад | |
 | openSUSE-SU-2024:0276-1 Security update for cacti, cacti-spine | около 2 лет назад | ||
| openSUSE-SU-2024:0274-1 Security update for cacti, cacti-spine | около 2 лет назад |
Уязвимостей на страницу