CVE-2022-36746

CVE-2022-36746 is a confirmed XSS in LibreNMS v22.6.0 via the oxidized-cfg-check.inc.php component. Public documents describe the flaw's existence and affected software, but do not provide detailed exploit steps within the CVE entry itself. The core impact is cross-site scripting, with a CVSS v3....

CVE-2022-36745

CVE-2022-36745 affects LibreNMS v22.6.0, with a cross-site scripting (XSS) vulnerability in the component print-customoid.php. The root cause is an XSS flaw in that PHP component, enabling user-initiated script execution under certain conditions. Documents consistently describe the issue as a vul...

CVE-2022-36746

LibreNMS v22.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component oxidized-cfg-check.inc.php...

CVE-2022-36745

LibreNMS v22.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component print-customoid.php...

PT-2022-23599 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: LibreNMS version 22.6.0 Description: A cross-site scripting XSS issue was found in LibreNMS via the component oxidized-cfg-check.inc.php. This allows for potential malicious script execution. Recommendations: For LibreNMS version 22.6.0, as a...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A security vulnerability exists in LibreNMS version v22.6.0, which stems from a discovery...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A security vulnerability exists in LibreNMS version v22.6.0, which stems from the discove...

LibreNMS Cross-Site Scripting Vulnerability (CNVD-2022-66503)

LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments and automatic updates.LibreNMS v22.3.0 version contains a cross-site scripting vulnerability that originates from the...

LibreNMS Command Injection Vulnerability (CNVD-2022-91160)

LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. LibreNMS v22.3.0 contains a command injection vulnerability that stems from the failure of the serviceip, hostname and serviceparam parameters to properly filter the construct command special...

Command Injection

librenms/librenms is vulnerable to command injection. The vulnerability exists in pollservice function because the serviceip, hostname, and serviceparam parameters are not properly handled which allows an attacker to inject and execute arbitrary commands...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to cross-site scriptingXSS attacks. The library does not properly escape the special characters in formatMessage function in GraylogController.php file, allowing an attacker to inject and execute malicious javascript...

GHSA-23F2-VGR6-FWV7 Command injection in librenms

LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...

GHSA-2GQG-2RG7-GH33 Cross site scripting in librenms

LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...

Cross site scripting in librenms

LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...

Command injection in librenms

LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...

CVE-2022-29712

LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...

CVE-2022-29711

LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...

CVE-2022-29711

LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...

CVE-2022-29712

LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...

Command injection

LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...