1299 matches found
CVE-2022-0772
LibreNMS (librenms/librenms) contains a Stored XSS vulnerability that affects versions before 22.2.2. Root cause: improper handling/validation of client-side data in the web application. Impact per sources: Cross-site scripting with potential for user-assisted or automatic execution of client-sid...
CVE-2022-0772 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
Librenms 跨站脚本漏洞
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates.Librenms suffers from a cross-site scripting vulnerability that stems from the lack of proper...
librenms Information Disclosure Vulnerability (CNVD-2022-12751)
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from an information disclosure vulnerability that stems from allowing users with...
librenms Cross-Site Scripting Vulnerability (CNVD-2022-12750)
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from a cross-site scripting vulnerability that stems from a lack of data validatio...
Cross-site Scripting (XSS)
librenms is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input via the dashboardname allowing an attacker to inject maliciously crafted scripts into the system...
Improper Authorization
librenms is vulnerable to improper authorization. The vulnerability exists due to the lack of validation of the user's role and level allowing an attacker to switch on/off installed plugins...
Improper Access Control
librenms/librenms is vulnerable to improper access control. Missing to keep plugin admin pages to be within admin route and missing admin check/control allows an attacker to perform unauthorized access...
Information Leakage
librenms/librenms is vulnerable to information leakage. Missing to keep plugin admin pages to be within admin route and missing admin check/control causes leakages of sensitive information...
Improper Access Control in librenms
Improper Access Control in Packagist librenms/librenms prior to 22.2.0...
GHSA-33WF-4CRM-2322 Improper Access Control in librenms
Improper Access Control in Packagist librenms/librenms prior to 22.2.0...
Improper Authorization in librenms
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
GHSA-PPFM-RJ6P-38Q6 Improper Authorization in librenms
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
Missing Authorization in librenms/librenms
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
GHSA-254Q-RQMW-VX45 Missing Authorization in librenms/librenms
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
GHSA-GJ26-G5QF-JRH7 Cross-site Scripting in librenms
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...
Cross-site Scripting in librenms
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...
librenms Access Control Error Vulnerability
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, automatic discovery of network environments and automatic updates. librenms suffers from an access control error vulnerability, which stems from an improper acce...
librenms Cross-Site Scripting Vulnerability (CNVD-2022-12754)
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates.Librenms suffers from a cross-site scripting vulnerability that stems from a lack of data validation...
