UbuntuUpdates.org

Bugs fixes in "cacti"

Origin Bug number Title Date fixed
CVE CVE-2015-2665 Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vector 2015-07-01
Launchpad 1210822 Please backport cacti security fixes 2015-07-01
CVE CVE-2014-4002 Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the (1) drp_act 2015-07-01
CVE CVE-2014-2327 Cross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users fo 2015-07-01
CVE CVE-2014-5043 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed th 2015-07-01
CVE CVE-2014-5026 Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web scri 2015-07-01
CVE CVE-2014-5025 Cross-site scripting (XSS) vulnerability in data_sources.php in Cacti 0.8.8b allows remote authenticated users with console access to inject arbitrar 2015-07-01
CVE CVE-2014-5262 SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrar 2015-07-01
CVE CVE-2014-5261 The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharac 2015-07-01
CVE CVE-2015-4454 SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute ar 2015-07-01
CVE CVE-2015-4342 SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef 2015-07-01
CVE CVE-2015-2665 Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vector 2015-07-01
Launchpad 1210822 Please backport cacti security fixes 2015-07-01
Debian 654352 cacti: Cacti doesn't work after upgrade due to database access error - Debian Bug report logs 2012-01-19
Launchpad 544828 Depends on libapache2-mod-php5. This is a bug, as I would like to run PHP5 through apache worker using FCGI, which would run cacti just fine. 2012-01-19
Debian 653863 cacti: Syntax error in cacti/site/include/global.php - Debian Bug report logs 2012-01-09
Debian 631596 [l10n] Updated Czech translation of cacti debconf messages - Debian Bug report logs 2011-12-18
Debian 631900 [l10n:eu] cacti 0.8.7g-2.1: updated Basque translation - Debian Bug report logs 2011-12-18
Debian 631982 cacti: [INTL:pt] Updated Portuguese translation for debconf messages - Debian Bug report logs 2011-12-18
Launchpad 619663 libdrm: "[maverick] Non-mirrored dual-screen gives narrow display on secondary monitor" 2011-12-18



About   -   Send Feedback to @ubuntu_updates