1216 matches found
CVE-2022-0588
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0588
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0587
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
Authorization
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
Authorization
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0589 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...
CVE-2022-0589
CVE-2022-0589 is a Cross-site Scripting (XSS) vulnerability in librenms/librenms, stored XSS prior to version 22.1.0. The root cause cited across sources is lack of data validation/filtering and output in templates (notably Create/Modify Transfer Group, Add/Edit Service, and Edit Service), leadin...
CVE-2022-0589 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...
CVE-2022-0588
The CVE-2022-0588 entry refers to an information-disclosure vulnerability in librenms/librenms due to Missing Authorization prior to version 22.2.0. Multiple connected sources (Red Hat, OSV, CNVD, GHSA advisories, and PT-2022-13283) confirm that unauthorised access could expose sensitive informat...
CVE-2022-0588 Missing Authorization in librenms/librenms
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0588 Missing Authorization in librenms/librenms
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0587 Improper Authorization in librenms/librenms
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0587 Improper Authorization in librenms/librenms
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0587
Summary: CVE-2022-0587 affects the Librenms project (librenms/librenms) prior to version 22.2.0, due to improper authorization that could allow manipulation of plugins or user-accessible settings. Affected software: LibreNMS repository/librenms (Packagist distribution). Root cause / vulnerability...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scriptingXSS attacks. The vulnerability exists due to the lack of sanitization in the Transport name field in the alert-transports.inc.php file allowing an attacker to inject and execute malicious javascript through the alerts module...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in addhost.inc.php in sysName, Hardware and Community fields which allows an attacker to send and execute arbitrary javascript...
GHSA-RP34-85X3-3764 Cross-site Scripting in librenms
Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...
GHSA-HXMR-5GV9-6P8V Cross-site Scripting in librenms
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...
