FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  384402
Date:      2015-04-21
Time:      02:41:56Z
Committer: jbeich

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
e02e6a4e-6b26-11df-96b2-0015587e2cc1cacti -- multiple vulnerabilities

Multiple vulnerabilities have been reported to exist in older version of Cacti. The release notes of Cacti 0.8.7f summarizes the problems as follows:

  • SQL injection and shell escaping issues
  • Cross-site scripting issues
  • Cacti Graph Viewer SQL injection vulnerability

Discovery 2010-05-24
Entry 2010-06-24
cacti
lt 0.8.7f

http://php-security.org/2010/05/13/mops-2010-023-cacti-graph-viewer-sql-injection-vulnerability/index.html
http://www.cacti.net/release_notes_0_8_7f.php
http://www.bonsai-sec.com/en/research/vulnerabilities/cacti-os-command-injection-0105.php
http://www.vupen.com/english/advisories/2010/1204
e02e6a4e-6b26-11df-96b2-0015587e2cc1cacti -- multiple vulnerabilities

Multiple vulnerabilities have been reported to exist in older version of Cacti. The release notes of Cacti 0.8.7f summarizes the problems as follows:

  • SQL injection and shell escaping issues
  • Cross-site scripting issues
  • Cacti Graph Viewer SQL injection vulnerability

Discovery 2010-05-24
Entry 2010-06-24
cacti
lt 0.8.7f

http://php-security.org/2010/05/13/mops-2010-023-cacti-graph-viewer-sql-injection-vulnerability/index.html
http://www.cacti.net/release_notes_0_8_7f.php
http://www.bonsai-sec.com/en/research/vulnerabilities/cacti-os-command-injection-0105.php
http://www.vupen.com/english/advisories/2010/1204
f08e2c15-ffc9-11e0-b0f3-bcaec565249ccacti -- Multiple vulnerabilities

Cacti Group reports:

SQL injection issue with user login, and cross-site scripting issues.


Discovery 2011-09-26
Entry 2011-10-26
cacti
lt 0.8.7h

http://www.cacti.net/release_notes_0_8_7h.php
b3b8d491-0fbb-11e3-8c50-1c6f65c11ee6cacti -- allow remote attackers to execute arbitrary SQL commands

Cacti release reports:

Multiple security vulnerabilities have been fixed:

  • SQL injection vulnerabilities

Discovery 2013-08-06
Entry 2013-08-29
cacti
lt 0.8.8b

CVE-2013-1434
CVE-2013-1435
http://www.cacti.net/release_notes_0_8_8b.php
f08e2c15-ffc9-11e0-b0f3-bcaec565249ccacti -- Multiple vulnerabilities

Cacti Group reports:

SQL injection issue with user login, and cross-site scripting issues.


Discovery 2011-09-26
Entry 2011-10-26
cacti
lt 0.8.7h

http://www.cacti.net/release_notes_0_8_7h.php