Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-10059
3.5
LOWCVSS v2
Published
April 12, 2018
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] instead of $_SERVER['SCRIPT_NAME'] to determine a page name.
GitHub
cacti
NPMExtremely simple MongoDB/Redis backups to Amazon S3 with encryption and compression'
NPMExtremely simple MongoDB/Redis backups to Amazon S3 with encryption and compression'<= 1.1.36NVD