Ganglia

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Ganglia records in CISA KEV

No Ganglia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ganglia-web 9 records MEDIUM Ganglia 3 records MEDIUM Gmond 1 record LOW Php Rrd Web Client 1 record LOW

Records

3 records in Ganglia · all components

TI-2009-00225 CVE-2009-0241 · GHSA-7c32-r36c-5227

Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia…

MEDIUM 41

Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service (crash) via a request to the gmetad service with a long pathname.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05346 Published 2009-01-21 No fix listed CWE-119

TI-2011-03298 CVE-2011-3741 · GHSA-9cr2-h389-pj55

Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct…

LOW 26

Ganglia 3.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by host_view.php and certain other files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01581 Published 2011-09-23 No fix listed CWE-200

TI-2007-06162 CVE-2007-6465 · GHSA-crwm-h95h-x98m

Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) c and (2) h parameters to (a) web/host_gmetrics.php; th…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01291 Published 2007-12-20 No fix listed CWE-79

Open these records in search →

Critical	1
High	3
Medium	10
Low	0
No CVSS	0