Total 148 security vulnerabilities recorded for cacti software and firmware.
Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, users with console access can be redirected to an arbi...
Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged ...
Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allow...
Cacti is an open source operational monitoring and fault management framework. A defect in the sql_save function was discovered. When the column type ...
Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a privilege escalation vulnerability. ...
Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1....
Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vu...
Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vu...
Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vu...
Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vu...
Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vu...
Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vu...
Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_vi...
Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vul...
Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allow...
A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web scrip...
In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cacti_ldap_auth() al...
Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php....
Cacti before 1.2.6 allows IDOR (Insecure Direct Object Reference) for accessing any graph via a modified local_graph_id parameter to graph_xport.php. ...
Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected v...
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types....
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a n...
As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the Jav...
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during cre...