CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

324 matches found

osv_ghsa•added 2021/05/25 6:47 p.m.•49 views

GHSA-JJHW-5MXP-2G2Q Cross-site Scripting in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since the...

4.8CVSS4.9AI score0.01043EPSS

SaveExploits1References7

osv_ghsa•added 2021/05/25 6:46 p.m.•44 views

GHSA-JMV4-73V2-PVGC Cross-site Scripting in OpenNMS Horizon

4.8CVSS4.8AI score0.0102EPSS

SaveExploits1References5

Github Security Blog•added 2021/05/25 6:46 p.m.•79 views

Cross-site Scripting in OpenNMS Horizon

4.8CVSS3.3AI score0.0102EPSS

SaveExploits1References5Affected Software1

osv_ghsa•added 2021/05/25 6:46 p.m.•73 views

GHSA-2RQ5-68HM-H4J8 Cross-Site Request Forgery in OpenNMS Horizon

8.8CVSS8.6AI score0.00726EPSS

SaveExploits1References5

Github Security Blog•added 2021/05/25 6:46 p.m.•80 views

Cross-Site Request Forgery in OpenNMS Horizon

8.8CVSS4.1AI score0.00726EPSS

SaveExploits1References5Affected Software1

Github Security Blog•added 2021/05/25 6:46 p.m.•74 views

Cross-Site Request Forgery in OpenNMS Horizon

4.3CVSS3.6AI score0.00633EPSS

SaveExploits1References5Affected Software2

osv_ghsa•added 2021/05/25 6:46 p.m.•87 views

GHSA-P63H-7HW8-5CW4 Cross-Site Request Forgery in OpenNMS Horizon

4.3CVSS4.5AI score0.00633EPSS

SaveExploits1References5

Cvelist•added 2021/05/25 6:42 p.m.•43 views

CVE-2021-25934

In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.6AI score0.01008EPSS

SaveExploits1References3

CVE•added 2021/05/25 6:42 p.m.•91 views

CVE-2021-25934

CVE-2021-25934 affects OpenNMS Horizon (opennms-18.0.0-1 through opennms-27.1.0-1) and OpenNMS Meridian (meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1, and meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1). The root cause is that createRequisitionedNo...

5.4CVSS5.3AI score0.01008EPSS

SaveExploits1References3Affected Software2

Mend•added 2021/05/25 6:42 p.m.•3 views

CVE-2021-25934

5.4CVSS0.01008EPSS

SaveExploits1References4

CVE•added 2021/05/25 6:32 p.m.•82 views

CVE-2021-25935

The CVE-2021-25935 issue affects OpenNMS Horizon versions 17.0.0-1 through 27.1.0-1 and OpenNMS Meridian foundation releases from 2015.1.0-1 to 2020.1.7-1. The root cause is improper validation in the add() function for the foreign-source parameter, allowing a stored Cross-Site Scripting (XSS) pa...

5.4CVSS5.4AI score0.0091EPSS

SaveExploits1References3Affected Software2

Mend•added 2021/05/25 6:32 p.m.•3 views

CVE-2021-25935

In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.4CVSS0.0091EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2021/05/25 12:00 a.m.•6 views

CVE-2021-25935: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.8AI score0.0091EPSS

SaveExploits1References2

CNNVD•added 2021/05/25 12:00 a.m.•16 views

Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the US-based OpenNMS Group Opennms Group. A cross-site scripting vulnerability exists in OpenNMS Horizon and OpenNMS Meridian, which stems from the function add performing incorrect...

5.4CVSS5.7AI score0.0091EPSS

SaveExploits1References3

CNNVD•added 2021/05/25 12:00 a.m.•19 views

Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the U.S.-based OpenNMS Group Opennms Group. A cross-site scripting vulnerability exists in OpenNMS Horizon and OpenNMS Meridian, which stems from the fact that the function...

5.4CVSS5.6AI score0.01008EPSS

SaveExploits1References3

Positive Technologies•added 2021/05/25 12:00 a.m.•5 views

PT-2021-16865

Name of the Vulnerable Software and Affected Versions OpenNMS Horizon versions opennms-17.0.0-1 through opennms-27.1.0-1 OpenNMS Meridian versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1 OpenNMS Meridian versions meridian-foundation-2020.1.0-1 through...

5.4CVSS0.0091EPSS

SaveExploits1References5

Positive Technologies•added 2021/05/25 12:00 a.m.•5 views

PT-2021-16864

Name of the Vulnerable Software and Affected Versions OpenNMS Horizon versions opennms-18.0.0-1 through opennms-27.1.0-1 OpenNMS Meridian versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1 OpenNMS Meridian versions meridian-foundation-2020.1.0-1 through...

5.4CVSS0.01008EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2021/05/25 12:00 a.m.•7 views

CVE-2021-25934: Improper Neutralization of Input During Web Page Generation

5.4CVSS5.8AI score0.01008EPSS

SaveExploits1References2

osv_cve•added 2021/05/20 3:15 p.m.•31 views

CVE-2021-25931

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection at...

8.8CVSS6.8AI score

SaveExploits0References3

NVD•added 2021/05/20 3:15 p.m.•31 views

CVE-2021-25929

4.8CVSS0.0102EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by