Overview Repositories Revisions Requests Users Attributes Meta

Revisions of cacti

Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1174071 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 50) 
cacti 1.2.27
* CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240)
* CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229)
* CVE-2024-31459: RCE vulnerability when plugins include files (boo#1224238)
* CVE-2024-31460: SQL Injection vulnerability when using tree rules through Automation API (boo#1224239)
* CVE-2024-29894: XSS vulnerability when using JavaScript based messaging API (boo#1224231)
* CVE-2024-31458: SQL Injection vulnerability when using form templates (boo#1224241)
* CVE-2024-31444: XSS vulnerability when reading tree rules with Automation API (boo#1224236)
* CVE-2024-31443: XSS vulnerability when managing data queries (boo#1224235)
* CVE-2024-31445: SQL Injection vulnerability when retrieving graphs using Automation API (boo#1224237)
* CVE-2024-27082: XSS vulnerability when managing trees (boo#1224230)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1134986 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 48) 
cacti 1.2.26
CVE-2023-50250 boo#1218380
CVE-2023-49084 boo#1218360
CVE-2023-49085 boo#1218378
CVE-2023-49086 boo#1218366
CVE-2023-49088 boo#1218379
CVE-2023-51448 boo#1218381
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1109347 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 47) 
cl update for tracking...

CVE-2023-30534 boo#1215082
CVE-2023-39360 boo#1215044
CVE-2023-39361 boo#1215045
CVE-2023-39357 boo#1215040
CVE-2023-39362 boo#1215047
CVE-2023-39359 boo#1215043
CVE-2023-39358 boo#1215042
CVE-2023-39365 boo#1215051
CVE-2023-39364 boo#1215050
CVE-2023-39366 boo#1215052
CVE-2023-39510 boo#1215053
CVE-2023-39511 boo#1215081
CVE-2023-39512 boo#1215054
CVE-2023-39513 boo#1215055
CVE-2023-39514 boo#1215056
CVE-2023-39515 boo#1215058
CVE-2023-39516 boo#1215059
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1109188 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 46) 
cacti 1.2.25 (boo#1215024)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1046255 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 44) 
cacti 1.2.23 CVE-2022-46169 boo#1206185
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 972230 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 41) 
cacti 1.2.20 CVE-2022-0730 boo#1196692
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 913438 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 39) 
- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 890825 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 38) 
cacti 1.2.17 CVE-2020-35701 boo#1180804
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 856911 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 37) 
- fix httpd startup errors due to mismatched configuration
  directives boo#1175314
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 820849 from Andreas Stieger's avatar Andreas Stieger (AndreasStieger) (revision 33) 
- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure
Displaying revisions 1 - 20 of 50
openSUSE Build Service is sponsored by
Places