CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

323 matches found

osv-ghsa•added 2022/05/24 7:03 p.m.•40 views

GHSA-9HHC-CC6C-99HH OpenNMS Horizon vulnerable to XSS

In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.4CVSS5.3AI score0.01008EPSS

SaveExploits1References4

Github Security Blog•added 2022/05/24 7:03 p.m.•31 views

OpenNMS Horizon vulnerable to XSS

5.4CVSS6.3AI score0.01008EPSS

SaveExploits1References5Affected Software1

Github Security Blog•added 2022/05/24 5:42 p.m.•52 views

OpenNMS Horizon RCE via JEXL2 expression

OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts 1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions...

8.8CVSS7.8AI score0.02365EPSS

SaveExploits0References5Affected Software4

osv-ghsa•added 2022/05/24 5:42 p.m.•78 views

GHSA-C3MP-9VX3-2RVV OpenNMS Horizon RCE via JEXL2 expression

8.8CVSS9AI score0.02365EPSS

SaveExploits0References4

Github Security Blog•added 2022/05/24 5:17 p.m.•51 views

OpenNMS Horizon RCE via Unsafe Deserialization

An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7. The ActiveMQ channel configuration allowed for arbitrary deserialization of Java objects aka ActiveMQ Minion payload deserialization, leading to remote code execution for any...

8.8CVSS8AI score0.03456EPSS

SaveExploits0References9Affected Software1

osv-cve•added 2021/06/01 12:15 p.m.•26 views

CVE-2021-25932

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

5.4CVSS6.2AI score

SaveExploits0References4

NVD•added 2021/06/01 12:15 p.m.•23 views

CVE-2021-25932

5.4CVSS0.00926EPSS

SaveExploits1References4

attackerkb•added 2021/06/01 12:15 p.m.•10 views

CVE-2021-25932

5.4CVSS5.8AI score0.00926EPSS

SaveExploits1References5

Prion•added 2021/06/01 12:15 p.m.•26 views

Cross site scripting

3.5CVSS5.3AI score0.00926EPSS

SaveExploits1References4Affected Software2

Cvelist•added 2021/06/01 11:15 a.m.•36 views

CVE-2021-25932

5.6AI score0.00926EPSS

SaveExploits1References4

Mend•added 2021/06/01 11:15 a.m.•7 views

CVE-2021-25932

5.4CVSS0.00926EPSS

SaveExploits1References4

CVE•added 2021/06/01 11:15 a.m.•64 views

CVE-2021-25932

CVE-2021-25932 affects OpenNMS Horizon (opennms-1-0-stable to opennms-27.1.0-1) and OpenNMS Meridian (

5.4CVSS5.3AI score0.00926EPSS

SaveExploits1References4Affected Software2

CNNVD•added 2021/06/01 12:00 a.m.•18 views

Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the U.S.-based OpenNMS Group Opennms Group. A cross-site scripting vulnerability exists in OpenNMS Horizon, which stems from versions OpenNMS -1-0-stable through OpenNMS -27.1.0-1;...

5.4CVSS5.6AI score0.00926EPSS

SaveExploits1References5

Positive Technologies•added 2021/06/01 12:00 a.m.•7 views

PT-2021-16862

Name of the Vulnerable Software and Affected Versions OpenNMS Horizon versions opennms-1-0-stable through opennms-27.1.0-1 OpenNMS Meridian versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1 OpenNMS Meridian versions meridian-foundation-2020.1.0-1 through...

5.4CVSS0.00926EPSS

SaveExploits1References8

Rapid7 Vulnerability Database (full)•added 2021/06/01 12:00 a.m.•12 views

CVE-2021-25932: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.8AI score0.00926EPSS

SaveExploits1References2

osv-cve•added 2021/05/25 7:15 p.m.•26 views

CVE-2021-25935

In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.4CVSS6.3AI score

SaveExploits0References3

osv-cve•added 2021/05/25 7:15 p.m.•27 views

CVE-2021-25934

5.4CVSS6.2AI score

SaveExploits0References3

NVD•added 2021/05/25 7:15 p.m.•25 views

CVE-2021-25934

5.4CVSS0.01008EPSS

SaveExploits1References3

attackerkb•added 2021/05/25 7:15 p.m.•18 views

CVE-2021-25935

5.4CVSS5.8AI score0.0091EPSS

SaveExploits1References4

osv-ghsa•added 2021/05/25 6:47 p.m.•48 views

GHSA-JJHW-5MXP-2G2Q Cross-site Scripting in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since the...

4.8CVSS4.9AI score0.01043EPSS

SaveExploits1References7

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by