Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 8:27 a.m.4 views

CVE-2024-47527

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to t...

7.5CVSS6.2AI score0.0038EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2024/10/01 8:31 p.m.18 views

LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature

Summary A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to the execution of malicious code in the context of other users'...

7.5CVSS5.6AI score0.0038EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2024/10/01 8:31 p.m.11 views

GHSA-RWWC-2V8Q-GC9V LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature

Summary A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to the execution of malicious code in the context of other users'...

7.5CVSS5.8AI score0.0038EPSS
Exploits1References5
CVE
CVE
added 2024/10/01 8:23 p.m.39 views

CVE-2024-47527

Summary (CVE-2024-47527, LibreNMS) A Stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS, affecting the Device Dependencies feature. The flaw allows an authenticated user to inject arbitrary JavaScript via the device hostname parameter, which can execute in other users’ sessions, p...

7.5CVSS5.6AI score0.0038EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/01 8:23 p.m.11 views

CVE-2024-47527 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to t...

7.5CVSS5.4AI score0.0038EPSS
Exploits1References2
OSV
OSV
added 2024/10/01 8:23 p.m.7 views

CVE-2024-47527 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to t...

7.5CVSS5.4AI score0.0038EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/10/01 8:23 p.m.12 views

CVE-2024-47527 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to t...

7.5CVSS0.0038EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/10/01 12:0 a.m.3 views

PT-2024-7961 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 24.9.0 Description: A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the hostname parameter. This can lead to the...

8CVSS5.5AI score0.0038EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2020/08/14 12:0 a.m.41 views

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:2233-1)

This update for libvirt fixes the following issues : CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. - bsc1161883, bsc1174458 qemu: Setup emulator thread and cpuset.mems before exec - bsc1171946 libxl:...

8.8CVSS7.7AI score0.00196EPSS
Exploits0References7
Rows per page
Query Builder