Filtered by vendor Librenms
Subscriptions
Total
55 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-15877 | 1 Librenms | 1 Librenms | 2024-08-04 | 8.8 High |
| An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' => 'admin'" instead of "'middleware' => ['can:admin']" in routes/web.php. | ||||
| CVE-2021-44279 | 1 Librenms | 1 Librenms | 2024-08-04 | 6.1 Medium |
| Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php. | ||||
| CVE-2021-44278 | 1 Librenms | 1 Librenms | 2024-08-04 | 9.8 Critical |
| Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php. | ||||
| CVE-2021-44277 | 1 Librenms | 1 Librenms | 2024-08-04 | 6.1 Medium |
| Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php. | ||||
| CVE-2021-43324 | 1 Librenms | 1 Librenms | 2024-08-04 | 6.1 Medium |
| LibreNMS through 21.10.2 allows XSS via a widget title. | ||||
| CVE-2021-31274 | 1 Librenms | 1 Librenms | 2024-08-03 | 5.4 Medium |
| In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api->description variable. As a result, arbitrary Javascript code can get executed. | ||||
| CVE-2022-36746 | 1 Librenms | 1 Librenms | 2024-08-03 | 6.1 Medium |
| LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php. | ||||
| CVE-2022-36745 | 1 Librenms | 1 Librenms | 2024-08-03 | 6.1 Medium |
| LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php. | ||||
| CVE-2022-29711 | 1 Librenms | 1 Librenms | 2024-08-03 | 6.1 Medium |
| LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php. | ||||
| CVE-2022-29712 | 1 Librenms | 1 Librenms | 2024-08-03 | 9.8 Critical |
| LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters. | ||||
| CVE-2022-4067 | 1 Librenms | 1 Librenms | 2024-08-03 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | ||||
| CVE-2022-4068 | 1 Librenms | 1 Librenms | 2024-08-03 | 5.4 Medium |
| A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context of an admin's account. | ||||
| CVE-2022-4069 | 1 Librenms | 1 Librenms | 2024-08-03 | 4.8 Medium |
| Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. | ||||
| CVE-2022-4070 | 1 Librenms | 1 Librenms | 2024-08-03 | 9.8 Critical |
| Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0. | ||||
| CVE-2022-3516 | 1 Librenms | 1 Librenms | 2024-08-03 | 6.1 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | ||||
| CVE-2022-3562 | 1 Librenms | 1 Librenms | 2024-08-03 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | ||||
| CVE-2022-3525 | 1 Librenms | 1 Librenms | 2024-08-03 | 8.8 High |
| Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0. | ||||
| CVE-2022-3561 | 1 Librenms | 1 Librenms | 2024-08-03 | 6.1 Medium |
| Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. | ||||
| CVE-2022-3231 | 1 Librenms | 1 Librenms | 2024-08-03 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0. | ||||
| CVE-2022-0772 | 1 Librenms | 1 Librenms | 2024-08-02 | 4.8 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2. | ||||