Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

366 matches found

Github Security Blog
Github Security Blog•added 2021/05/25 6:46 p.m.•66 views

Cross-Site Request Forgery in OpenNMS Horizon

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection, and...

4.3CVSS3.6AI score0.00633EPSS
SaveExploits1References5Affected Software2
Cvelist
Cvelist•added 2021/05/25 6:42 p.m.•40 views

CVE-2021-25934

In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.6AI score0.01008EPSS
SaveExploits1References3
CVE
CVE•added 2021/05/25 6:42 p.m.•82 views

CVE-2021-25934

CVE-2021-25934 affects OpenNMS Horizon (opennms-18.0.0-1 through opennms-27.1.0-1) and OpenNMS Meridian (meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1, and meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1). The root cause is that createRequisitionedNo...

5.4CVSS5.3AI score0.01008EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist•added 2021/05/25 6:32 p.m.•29 views

CVE-2021-25935

In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.7AI score0.0091EPSS
SaveExploits1References3
CVE
CVE•added 2021/05/25 6:32 p.m.•73 views

CVE-2021-25935

The CVE-2021-25935 issue affects OpenNMS Horizon versions 17.0.0-1 through 27.1.0-1 and OpenNMS Meridian foundation releases from 2015.1.0-1 to 2020.1.7-1. The root cause is improper validation in the add() function for the foreign-source parameter, allowing a stored Cross-Site Scripting (XSS) pa...

5.4CVSS5.4AI score0.0091EPSS
SaveExploits1References3Affected Software2
CNNVD
CNNVD•added 2021/05/25 12:00 a.m.•11 views

Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the US-based OpenNMS Group Opennms Group. A cross-site scripting vulnerability exists in OpenNMS Horizon and OpenNMS Meridian, which stems from the function add performing incorrect...

5.4CVSS5.7AI score0.0091EPSS
SaveExploits1References3
OSV
OSV•added 2021/05/20 3:15 p.m.•35 views

CVE-2021-25929

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting since...

4.8CVSS5.8AI score
SaveExploits0References3
NVD
NVD•added 2021/05/20 3:15 p.m.•23 views

CVE-2021-25929

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting since...

4.8CVSS0.0102EPSS
SaveExploits1References3
NVD
NVD•added 2021/05/20 3:15 p.m.•28 views

CVE-2021-25931

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection at...

8.8CVSS0.00726EPSS
SaveExploits1References3
NVD
NVD•added 2021/05/20 3:15 p.m.•20 views

CVE-2021-25933

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

4.8CVSS0.01043EPSS
SaveExploits1References4
OSV
OSV•added 2021/05/20 3:15 p.m.•22 views

CVE-2021-25933

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

4.8CVSS6.3AI score
SaveExploits0References4
OSV
OSV•added 2021/05/20 3:15 p.m.•29 views

CVE-2021-25931

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection at...

8.8CVSS6.8AI score
SaveExploits0References3
Prion
Prion•added 2021/05/20 3:15 p.m.•24 views

Cross site scripting

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

3.5CVSS5AI score0.01043EPSS
SaveExploits1References4Affected Software2
Prion
Prion•added 2021/05/20 3:15 p.m.•29 views

Cross site scripting

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting since...

3.5CVSS4.7AI score0.0102EPSS
SaveExploits1References3Affected Software2
Prion
Prion•added 2021/05/20 3:15 p.m.•23 views

Cross site request forgery (csrf)

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection at...

6.8CVSS8.6AI score0.00726EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist•added 2021/05/20 2:59 p.m.•36 views

CVE-2021-25933

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

5.2AI score0.01043EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment•added 2021/05/20 2:59 p.m.•11 views

CVE-2021-25933

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

6.6AI score0.01043EPSS
SaveExploits1References4
CVE
CVE•added 2021/05/20 2:59 p.m.•83 views

CVE-2021-25933

In OpenNMS Horizon and Meridian, a Stored Cross-Site Scripting (XSS) vulnerability arises because validateFormInput() performs improper validation on groupName and groupComment inputs. This affects OpenNMS Horizon versions opennms-1-0-stable through opennms-27.1.0-1 and OpenNMS Meridian versions ...

4.8CVSS4.9AI score0.01043EPSS
SaveExploits1References4Affected Software2
Vulnrichment
Vulnrichment•added 2021/05/20 2:54 p.m.•10 views

CVE-2021-25931

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection at...

7.1AI score0.00726EPSS
SaveExploits1References3
Cvelist
Cvelist•added 2021/05/20 2:54 p.m.•35 views

CVE-2021-25931

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to CSRF, due to no CSRF protection at...

8.8AI score0.00726EPSS
SaveExploits1References3
Rows per page
Query Builder