Graylog Detection Consolidation

Consolidation of Graylog detections. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Malicious code in bfx-facs-graylog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c827ea9bb1a85af6bce95ec512fdc282af7bf7d6d2a00174548b5d52c710d1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29711

LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...

LibreNMS cross-site scripting vulnerabilities

LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments and automatic updates.LibreNMS v22.3.0 version contains a cross-site scripting vulnerability that originates from the...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.0.0, <=4.5.0) +15 more potentially affected by CVE-2021-20328 via org.mongodb:mongodb-driver-legacy (>=3.12.0, <=3.12.7)

org.mongodb:mongodb-driver-legacy MAVEN version =3.12.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =1.0.0-m4, =1.0.0-m4, =1.0.0-m4, =3.3.0-beta.3, =4.3.15 and more Source cves: CVE-2021-20328 Source advisory: OSV:GHSA-RGHW-6PX2-FGWChttps://vulners.com/osv...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.0.0, <=4.5.0) +15 more potentially affected by CVE-2021-20328 via org.mongodb:mongodb-driver-legacy (>=3.12.0, <=3.12.7)

org.mongodb:mongodb-driver-legacy MAVEN version =3.12.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =1.0.0-m4, =1.0.0-m4, =1.0.0-m4, =3.3.0-beta.3, =4.3.15 and more Source cves: CVE-2021-20328 Source advisory: GHSA-RGHW-6PX2-FGWChttps://vulners.com/github/...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.0.0, <=4.5.0) +40 more potentially affected by CVE-2021-20328 via org.mongodb:mongodb-driver-sync (>=3.12.0, <=3.12.7)

org.mongodb:mongodb-driver-sync MAVEN version =3.12.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =3.0.0-alpha-15, =3.0.0-alpha-15, =4.5.0, =5.2.1, =5.2.1, =0.9.0, =0.10.0 and more Source cves: CVE-2021-20328 Source advisory: OSV:GHSA-RGHW-6PX2-FGWC...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.2.0, <=2.2.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=3.0.0, <=3.1.1) +32 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (5.6.12)

org.elasticsearch:elasticsearch MAVEN version 5.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =1.2.0, =3.0.0, =1.2.0, =1.0....

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +6 more potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (>=2.0.0-alpha.1, <=2.4.3)

org.graylog2:graylog2-server MAVEN version =2.0.0-alpha.1, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2018-11650 Source advisory: GHSA-H7G4-65MF-6MXH...

org.graylog2:graylog2-rest-routes (1.2.0-rc.2) potentially affected by CVE-2018-11651 via org.graylog2:graylog2-server (1.2.0-rc.2)

org.graylog2:graylog2-server MAVEN version 1.2.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog2:graylog2-rest-routes 1.2.0-rc.2 Source cves: CVE-2018-11651 Source advisory:...

org.graylog.telemetry:graylog-telemetry-plugin (1.0.0) potentially affected by CVE-2018-11651 via org.graylog2:graylog2-server (1.0.0-rc.4)

org.graylog2:graylog2-server MAVEN version 1.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin 1.0.0 Source cves: CVE-2018-11651 Source advisory:...

org.graylog.telemetry:graylog-telemetry-plugin (1.0.1) potentially affected by CVE-2018-11651 via org.graylog2:graylog2-server (1.0.0)

org.graylog2:graylog2-server MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin 1.0.1 Source cves: CVE-2018-11651 Source advisory:...

org.graylog.telemetry:graylog-telemetry-plugin (1.0.1) potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (1.0.0)

org.graylog2:graylog2-server MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin 1.0.1 Source cves: CVE-2018-11650 Source advisory:...

org.graylog.telemetry:graylog-telemetry-plugin (>=1.0.0-beta.2, <=1.0.0-beta.3) potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (1.0.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.0.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin =1.0.0-beta.2, =1.0.0-beta.3 Source cves:...

org.graylog.telemetry:graylog-telemetry-plugin (>=1.0.0-beta.2, <=1.0.0-beta.3) potentially affected by CVE-2018-11651 via org.graylog2:graylog2-server (1.0.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.0.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin =1.0.0-beta.2, =1.0.0-beta.3 Source cves:...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +6 more potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (>=2.0.0-alpha.1, <=2.4.3)

org.graylog2:graylog2-server MAVEN version =2.0.0-alpha.1, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2018-11650 Source advisory: OSV:GHSA-H7G4-65MF-6MXH...

org.graylog.telemetry:graylog-telemetry-plugin (1.0.0) potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (1.0.0-rc.4)

org.graylog2:graylog2-server MAVEN version 1.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin 1.0.0 Source cves: CVE-2018-11650 Source advisory:...

GHSA-435G-R2M8-GJVM Cross-site Scripting in Graylog

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...

GHSA-H7G4-65MF-6MXH Cross-site Scripting in Graylog Server

Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js...

Cross-site Scripting in Graylog Server

Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js...