1304 matches found
CVE-2022-0587
Summary: CVE-2022-0587 affects the Librenms project (librenms/librenms) prior to version 22.2.0, due to improper authorization that could allow manipulation of plugins or user-accessible settings. Affected software: LibreNMS repository/librenms (Packagist distribution). Root cause / vulnerability...
CVE-2022-0587 Improper Authorization in librenms/librenms
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scriptingXSS attacks. The vulnerability exists due to the lack of sanitization in the Transport name field in the alert-transports.inc.php file allowing an attacker to inject and execute malicious javascript through the alerts module...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in addhost.inc.php in sysName, Hardware and Community fields which allows an attacker to send and execute arbitrary javascript...
GHSA-RP34-85X3-3764 Cross-site Scripting in librenms
Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...
GHSA-HXMR-5GV9-6P8V Cross-site Scripting in librenms
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...
Cross-site Scripting in librenms
Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...
Cross-site Scripting in librenms
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.2.0...
Librenms 授权问题漏洞
Librenms is an open source network monitoring system based on PHP and MySQL from the Librenms community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. An authorization issue vulnerability exists in librenms that stems from improper...
Librenms 信息泄露漏洞
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from an information disclosure vulnerability that stems from allowing users with...
PT-2022-13283 · Librenms · Librenms
Name of the Vulnerable Software and Affected Versions: librenms/librenms versions prior to 22.2.0 Description: The issue concerns exposure of sensitive information to unauthorized actors due to missing authorization. Recommendations: For versions prior to 22.2.0, update to version 22.2.0 or later...
Librenms 跨站脚本漏洞
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from a cross-site scripting vulnerability that stems from a lack of data validatio...
CVE-2022-0580
Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0580
Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...
Authorization
Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0580
CVE-2022-0580 corresponds to an improper access control/incorrect authorization issue in the Librenms project. Multiple connected sources (e.g., Red Hat, GHSA, OSV) describe it as affecting librenms/librenms prior to version 22.2.0, caused by an authorization flaw that could enable access to feat...
CVE-2022-0580 Incorrect Authorization in librenms/librenms
Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0576
Cross-site Scripting XSS - Generic in Packagist librenms/librenms prior to 22.1.0...