Ganglia

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Ganglia records in CISA KEV

No Ganglia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ganglia-web 9 records MEDIUM Ganglia 3 records MEDIUM Gmond 1 record LOW Php Rrd Web Client 1 record LOW

Records

14 records

TI-2015-05715 CVE-2015-6816 · GHSA-mgrr-7c88-34fm

ganglia-web before 3.7.1 allows remote attackers to bypass authentication.

MEDIUM 48

ganglia-web before 3.7.1 allows remote attackers to bypass authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03562 Published 2017-08-09 No fix listed CWE-287

TI-2012-02976 CVE-2012-3448 · GHSA-qv5c-fqrv-r4vp

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute…

MEDIUM 45

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09944 Published 2012-08-06 No fix listed

TI-2009-00225 CVE-2009-0241 · GHSA-7c32-r36c-5227

Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia…

MEDIUM 41

Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service (crash) via a request to the gmetad service with a long pathname.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05346 Published 2009-01-21 No fix listed CWE-119

TI-2002-02023 CVE-2002-2104 · GHSA-2wgm-3pxj-gmrx

graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute…

LOW 37

graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02057 Published 2005-08-05 No fix listed

TI-2019-14613 CVE-2019-20378 · GHSA-fwwm-g9v9-26x8

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.

LOW 30

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01171 Published 2020-01-11 No fix listed CWE-79

TI-2024-35288 CVE-2024-52762 · GHSA-99p7-c89v-ph5p

A cross-site scripting (XSS) vulnerability in the component /master/header.php of…

LOW 29

A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" paramete…

CVSS 3.1MEDIUM 6.1 Network Low privileges User interaction EPSS 0.00774 Published 2024-11-19 No fix listed CWE-79

TI-2019-14614 CVE-2019-20379 · GHSA-24pq-f9c8-764p

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.

LOW 29

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00921 Published 2020-01-11 No fix listed CWE-79

TI-2024-35289 CVE-2024-52763 · GHSA-c9hj-p989-pvmr

A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of…

LOW 28

A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" param…

CVSS 3.1MEDIUM 6.1 Network Low privileges User interaction EPSS 0.00652 Published 2024-11-19 No fix listed CWE-79

TI-2003-01065 CVE-2003-1163 · GHSA-p3pg-fqc9-g66f

hash.c in Ganglia gmond 2.5.3 allows remote attackers to cause a denial of service…

LOW 27

hash.c in Ganglia gmond 2.5.3 allows remote attackers to cause a denial of service (segmentation fault) via a UDP packet that contains a single-byte name string, which is used as an out-of-bounds array index.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01889 Published 2005-05-10 No fix listed

TI-2011-03298 CVE-2011-3741 · GHSA-9cr2-h389-pj55

Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct…

LOW 26

Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by host_view.php and certain other files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01581 Published 2011-09-23 No fix listed CWE-200

TI-2013-05351 CVE-2013-6395 · GHSA-xx3m-g78m-fjqh

Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10…

LOW 24

Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02199 Published 2013-12-05 No fix listed CWE-79

TI-2013-01557 CVE-2013-1770 · GHSA-rvqj-8964-prw3

Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows…

LOW 24

Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote attackers to inject arbitrary web script or HTML via the view_name parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02164 Published 2014-04-02 No fix listed CWE-79

TI-2013-00209 CVE-2013-0275 · GHSA-g57r-hv37-c5q8

Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01925 Published 2013-03-12 No fix listed CWE-79

TI-2007-06162 CVE-2007-6465 · GHSA-crwm-h95h-x98m

Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) c and (2) h parameters to (a) web/host_gmetrics.php; th…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01291 Published 2007-12-20 No fix listed CWE-79

Open these records in search →

Critical	1
High	3
Medium	10
Low	0
No CVSS	0