CVE-2020-14295

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html · Broken Link
• packetstormsecurity.com/files/162384/Cacti-1.2.12-SQL-Injection-Remote-Code-Execution.html · Exploit
• packetstormsecurity.com/files/162918/Cacti-1.2.12-SQL-Injection-Remote-Command-Execution.html · Exploit
• Cacti/cacti · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W64CIB6L4HZRVQSWKPDDKXJO4J2XTOXD
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKM5G3YNSZDHDZMPCMAHG5B5M2V4XYSE
• security.gentoo.org/glsa/202007-03 · Third Party Advisory

cacti のその他の脆弱性

• CVE-2026-40941中 6.5Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation byp…
• CVE-2026-40084中 6.5Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal through the …
• CVE-2026-40083高 7.2Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unseria…
• CVE-2026-40082中 5.4Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing session_regenerate_id() after log…
• CVE-2026-40080中 6.1Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Redirect through a subs…