1336 matches found
CVE-2020-36947 LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection
LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the 'sort' parameter with crafted SQL injection techniques to retrieve...
CVE-2020-36947
LibreNMS 1.46 contains an authenticated SQL injection in the MAC accounting graph endpoint. An attacker with valid credentials can modify the sort parameter to perform SQL queries that extract sensitive database contents via time-based blind SQL injection. The exploitation targets the MAC account...
CVE-2020-36947
LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the 'sort' parameter with crafted SQL injection techniques to retrieve...
CVE-2020-36947 LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection
LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the 'sort' parameter with crafted SQL injection techniques to retrieve...
PT-2026-4926
Name of the Vulnerable Software and Affected Versions LibreNMS version 1.46 Description LibreNMS version 1.46 contains an authenticated SQL injection issue in the MAC accounting graph endpoint. This allows remote attackers to extract database information by manipulating the sort parameter with...
LibreNMS security vulnerabilities
LibreNMS is an open-source network monitoring system developed by the LibreNMS community, based on PHP and MySQL. This system features custom alerts, automatic discovery of networks, and automatic updates. Version 1.46 of LibreNMS contains a security vulnerability, which stems from improper...
CVE-2021-31274
In LibreNMS description variable. As a result, arbitrary Javascript code can get executed...
CVE-2025-23199
librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: /ajaxform.php - param: descr. Librenms version up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page...
CVE-2025-23201
librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to Cross-site Scripting XSS on the parameters:/addhost - param: community. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with th...
CVE-2022-0772
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
CVE-2022-0589
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...
CVE-2023-4978
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4981
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4347
Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.8.0...
CVE-2023-4982
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4977
Code Injection in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4980
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4979
Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.9.0...