Lucene search
+L

7 matches found

osv_cve
osv_cve
•added 2024/11/15 3:27 p.m.•24 views

CVE-2024-49764 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Capture Debug Information" page allows authenticated users to inject arbitrary JavaScript through the "hostname" parameter when creating a new device. This...

4.8CVSS6.2AI score0.00414EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/11/15 3:27 p.m.•34 views

CVE-2024-49764 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Capture Debug Information" page allows authenticated users to inject arbitrary JavaScript through the "hostname" parameter when creating a new device. This...

4.8CVSS0.00414EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2024/11/15 3:27 p.m.•33 views

LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php

Summary A Stored Cross-Site Scripting XSS vulnerability in the "Capture Debug Information" page allows authenticated users to inject arbitrary JavaScript through the "hostname" parameter when creating a new device. This vulnerability results in the execution of malicious code when the "Capture...

5.4CVSS6.6AI score0.00414EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2024/11/15 3:27 p.m.•28 views

GHSA-RMR4-X6C9-JC68 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php

Summary A Stored Cross-Site Scripting XSS vulnerability in the "Capture Debug Information" page allows authenticated users to inject arbitrary JavaScript through the "hostname" parameter when creating a new device. This vulnerability results in the execution of malicious code when the "Capture...

7.5CVSS6.6AI score0.00414EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•22 views

LibreNMS cross-site scripting vulnerabilities

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. A cross-site scripting vulnerability exists in LibreNMS that stems from a stored...

5.4CVSS5.6AI score0.00414EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•7 views

CVE-2024-49764: Improper Neutralization of Input During Web Page Generation

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Capture Debug Information" page allows authenticated users to inject arbitrary JavaScript through the "hostname" parameter when creating a new device. This...

5.4CVSS6.2AI score0.00414EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•10 views

PT-2024-33674

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 24.10.0 Description: A Stored Cross-Site Scripting XSS vulnerability in the "Capture Debug Information" page allows authenticated users to inject arbitrary JavaScript through the hostname parameter when creating a n...

5.4CVSS6AI score0.00414EPSS
SaveExploits1References11
Rows per page
Query Builder