Filtered by CWE-144
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-24367 2025-01-27 N/A
Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29.
CVE-2023-39212 1 Zoom 1 Rooms 2024-11-21 7.9 High
Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.