Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-7058
8.8
HIGHCVSS v3
Published
January 15, 2020
CVSS v2
6.5 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm.
GitHub
cacti
NPMExtremely simple MongoDB/Redis backups to Amazon S3 with encryption and compression'
NPMExtremely simple MongoDB/Redis backups to Amazon S3 with encryption and compression'= 1.2.8NVD