Red Hat Security AdvisoryRHSA-2010:0635
Red Hat High Performance Computing (HPC) Solution 5.5
Released 2010-08-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat HPC Solution for RHEL 5 Server GeoIP-1.4.7-0.1.20090931cvs.el5, GeoIP-devel-1.4.7-0.1.20090931cvs.el5, blacs-mvapich1-gnu-20000224-7 +47
Fixes 7 records
Priority LOW 39
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03802 · Published 2010-05-04 · Fixed CWE-89
Priority LOW 36
SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0137 · Published 2010-05-27 · Fixed CWE-89
Priority LOW 34
Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in (1) the FQDN fiel…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.02804 · Published 2010-08-23 · Fixed CWE-20
Priority LOW 29
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05739 · Published 2009-11-27 · Fixed CWE-79
Priority LOW 27
Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote attackers to inject arbitrary web script or…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04309 · Published 2010-08-23 · Fixed CWE-79
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML v…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01801 · Published 2010-08-23 · Fixed CWE-79
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML v…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01862 · Published 2010-08-23 · Fixed CWE-79