View | Details | Raw Unified | Return to bug 245205
Collapse All | Expand All

(-)vuxml-update/vuln.xml (+40 lines)
Lines 58-63 Link Here
58
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
58
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
59
-->
59
-->
60
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
60
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
61
  <vuln vid="725e6912-7346-11ea-90bf-0800276545c1">
62
    <topic>cacti -- multiple vulnerabilities</topic>
63
    <affects>
64
      <package>
65
	<name>cacti</name>
66
	<range><lt>1.2.10</lt></range>
67
      </package>
68
    </affects>
69
    <description>
70
      <body xmlns="http://www.w3.org/1999/xhtml">
71
	<p>The cacti developers reports:</p>
72
	<blockquote cite="https://github.com/Cacti/cacti/releases/tag/release%2F1.2.10">
73
	  <p>
74
	    When guest users have access to realtime graphs, remote code
75
	    could be executed (CVE-2020-8813).
76
	  </p>
77
	  <p>
78
	    Lack of escaping on some pages can lead to XSS exposure
79
	    (CVE-2020-7106).
80
	  </p>
81
	  <p>
82
	    Remote Code Execution due to input validation failure in
83
	    Performance Boost Debug Log (CVE-2020-7237).
84
	  </p>
85
	</blockquote>
86
      </body>
87
    </description>
88
    <references>
89
      <url>https://github.com/Cacti/cacti/releases/tag/release%2F1.2.10</url>
90
      <cvename>CVE-2020-8813</cvename>
91
      <cvename>CVE-2020-7106</cvename>
92
      <cvename>CVE-2020-7237</cvename>
93
      <freebsdpr>ports/245198</freebsdpr>
94
    </references>
95
    <dates>
96
      <discovery>2020-02-04</discovery>
97
      <entry>2020-03-31</entry>
98
    </dates>
99
  </vuln>
100
61
  <vuln vid="d331f691-71f4-11ea-8bb5-6cc21735f730">
101
  <vuln vid="d331f691-71f4-11ea-8bb5-6cc21735f730">
62
    <topic>PostgresSQL -- ALTER ... DEPENDS ON EXTENSION is missing authorization checks</topic>
102
    <topic>PostgresSQL -- ALTER ... DEPENDS ON EXTENSION is missing authorization checks</topic>
63
    <affects>
103
    <affects>

Return to bug 245205