1207 matches found
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting.The vulnerability exists in destroy function of DeviceGroupController.php and PortGroupController.php due to insufficient input validation in the pop-up notifications which allows an attacker to inject and execute malicious javaScript...
Insufficient Session Expiration
librenms/librenms uses insecure session management. The vulnerability exists due to lack of validate user session user session authentication allows a attacker to bypass authentication...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to Cross-site Scripting XSS. The vulnerability exists in destroy function of multiple classes due to the lack of validation of the user inputs which allows a remote attacker to inject and execute malicious javascript into the system...
LibreNMS Cross-Site Scripting Vulnerability (CNVD-2022-81232)
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...
LibreNMS Cross-Site Scripting Vulnerability (CNVD-2022-81234)
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...
LibreNMS code issue vulnerability
LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments, and automatic updates.LibreNMS versions prior to 22.10.0 have a security vulnerability that stems from insufficient sessi...
LibreNMS Cross-Site Scripting Vulnerability (CNVD-2022-80697)
LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments and automatic updates.LibreNMS versions prior to 22.10.0 have a security vulnerability that stems from the presence of...
LibreNMS Code Issues Vulnerabilities
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...
Unspecified Vulnerability in LibreNMS
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0, which stems fro...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in update function of UserController.php because the username is not properly sanitized in the admin user overview which allows an attacker to inject and execute arbitrary javascript...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in notifications.inc.php due to lack of escaping in title which allows an attacker to inject and execute malicious javascript...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in the title parameter of notifications.inc.php, allowing an attacker to inject and execute malicious javascript...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation in the map items in print-alert-rules.php, which allows a remote attacker to inject and execute malicious JavaScript into the system...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in the billname attribute in the printportlist function of bill.inc.php, allowing an attacker to inject and execute malicious javascript...
Cross-site Scripting in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...
Deserialization of Untrusted Data in librenms/librenms
Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...
GHSA-QCH4-JMF8-XVP7 Cross-site Scripting in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...
GHSA-264W-GW9G-FHGJ Cross-site Scripting in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
GHSA-F3HW-3H74-WR98 Cross-site Scripting in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...