Lucene search
+L

243 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:17 p.m.39 views

OpenNMS Horizon RCE via Unsafe Deserialization

An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7. The ActiveMQ channel configuration allowed for arbitrary deserialization of Java objects aka ActiveMQ Minion payload deserialization, leading to remote code execution for any...

8.8CVSS8AI score0.03456EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2021/06/01 12:15 p.m.20 views

CVE-2021-25932

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

5.4CVSS6.2AI score
SaveExploits0References4
NVD
NVD
added 2021/06/01 12:15 p.m.17 views

CVE-2021-25932

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

5.4CVSS0.00926EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/06/01 12:15 p.m.3 views

CVE-2021-25932

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

5.4CVSS5.8AI score0.00926EPSS
SaveExploits1References5
Prion
Prion
added 2021/06/01 12:15 p.m.17 views

Cross site scripting

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

3.5CVSS5.3AI score0.00926EPSS
SaveExploits1References4Affected Software2
CVE
CVE
added 2021/06/01 11:15 a.m.48 views

CVE-2021-25932

CVE-2021-25932 affects OpenNMS Horizon (opennms-1-0-stable to opennms-27.1.0-1) and OpenNMS Meridian (

5.4CVSS5.3AI score0.00926EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
added 2021/06/01 11:15 a.m.26 views

CVE-2021-25932

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

5.6AI score0.00926EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.7 views

Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the U.S.-based OpenNMS Group Opennms Group. A cross-site scripting vulnerability exists in OpenNMS Horizon, which stems from versions OpenNMS -1-0-stable through OpenNMS -27.1.0-1;...

5.4CVSS5.6AI score0.00926EPSS
SaveExploits1References5
OSV
OSV
added 2021/05/25 7:15 p.m.22 views

CVE-2021-25934

In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.4CVSS6.2AI score
SaveExploits0References3
NVD
NVD
added 2021/05/25 7:15 p.m.18 views

CVE-2021-25934

In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.4CVSS0.01008EPSS
SaveExploits1References3
OSV
OSV
added 2021/05/25 7:15 p.m.23 views

CVE-2021-25935

In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.4CVSS6.3AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/05/25 7:15 p.m.6 views

CVE-2021-25935

In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.4CVSS5.8AI score0.0091EPSS
SaveExploits1References4
OSV
OSV
added 2021/05/25 6:47 p.m.36 views

GHSA-JJHW-5MXP-2G2Q Cross-site Scripting in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since the...

4.8CVSS4.9AI score0.01043EPSS
SaveExploits1References7
OSV
OSV
added 2021/05/25 6:46 p.m.35 views

GHSA-JMV4-73V2-PVGC Cross-site Scripting in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting since ther...

4.8CVSS4.8AI score0.0102EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2021/05/25 6:46 p.m.69 views

Cross-site Scripting in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting since ther...

4.8CVSS3.3AI score0.0102EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/05/25 6:46 p.m.46 views

GHSA-2RQ5-68HM-H4J8 Cross-Site Request Forgery in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection at...

8.8CVSS8.6AI score0.00726EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2021/05/25 6:46 p.m.68 views

Cross-Site Request Forgery in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection at...

8.8CVSS4.1AI score0.00726EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/05/25 6:46 p.m.25 views

GHSA-P63H-7HW8-5CW4 Cross-Site Request Forgery in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection, and...

4.3CVSS4.5AI score0.00633EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2021/05/25 6:46 p.m.59 views

Cross-Site Request Forgery in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection, and...

4.3CVSS3.6AI score0.00633EPSS
SaveExploits1References5Affected Software2
Cvelist
Cvelist
added 2021/05/25 6:42 p.m.33 views

CVE-2021-25934

In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.6AI score0.01008EPSS
SaveExploits1References3
Rows per page
Query Builder