1207 matches found
Cross site scripting
LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...
LibreNMS 命令注入漏洞
LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. LibreNMS v22.3.0 contains a command injection vulnerability that stems from the failure of the serviceip, hostname and serviceparam parameters to properly filter the construct command special...
LibreNMS 跨站脚本漏洞
LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments and automatic updates.LibreNMS v22.3.0 version contains a cross-site scripting vulnerability that originates from the...
CVE-2022-29712
CVE-2022-29712 : Several command injection vulnerabilities are present in LibreNMS v22.3.0, arising from the failure to properly filter construct commands via the parameters service_ip , hostname , and service_param . The affected software is LibreNMS (v22.3.0 as stated in connected documents). T...
CVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
CVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
CVE-2022-29711
LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...
CVE-2022-29711
LibreNMS v22.3.0 contains a cross-site scripting (XSS) vulnerability in the component /Table/GraylogController.php due to lack of proper data validation/escaping. This is the root cause described across multiple sources (e.g., NVD, Red Hat, CNVD, OSV, GHSA). Impact: attacker can execute JavaScrip...
CVE-2022-29711
LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...
LibreNMS SQL Injection vulnerability
In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php deviceid POST parameter to ajaxform.php...
GHSA-G5R6-VRMX-9GWJ LibreNMS SQL Injection vulnerability
In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php deviceid POST parameter to ajaxform.php...
LibreNMS Information Disclosure
An issue was discovered in LibreNMS through 1.47. The scripts that handle graphing options html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with...
GHSA-Q5RG-WG7H-73M5 LibreNMS Information Disclosure
An issue was discovered in LibreNMS through 1.47. The scripts that handle graphing options html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with...
LibreNMS arbitrary OS commands execution
LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $POST'community' parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajaxoutput.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers...
GHSA-62Q7-QJ6G-GVR7 LibreNMS arbitrary OS commands execution
LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $POST'community' parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajaxoutput.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers...
GHSA-9M82-F3WX-P625 LibreNMS XSS Vulnerability
Persistent Cross-Site Scripting XSS issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboardname parameter in the /ajaxform.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and...
GHSA-4FWH-R866-PVH9 LibreNMS SQL Injection
LibreNMS through 1.47 allows SQL injection via the html/ajaxtable.php sorthostname parameter, exploitable by authenticated users during a search...
LibreNMS SQL Injection
LibreNMS through 1.47 allows SQL injection via the html/ajaxtable.php sorthostname parameter, exploitable by authenticated users during a search...