26 matches found
Arbitrary Command Injection
Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Arbitrary Command Injection in the deliverAlert process due to insufficient escaping of user-supplied input in the ex...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4981 Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4979 Cross-site Scripting (XSS) - Reflected in librenms/librenms
Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4978 Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4978 Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4979: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4347
CVE-2023-4347 is a reflected Cross-site Scripting (XSS) vulnerability in the LibreNMS project. The issue affects librenms/librenms versions prior to 23.8.0, arising from insufficient input filtering/escaping for user-controlled data, enabling arbitrary JavaScript in responses. Multiple connected ...
CVE-2022-4069
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-4067 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3231
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...
CVE-2022-3231 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
CVE-2022-0772
LibreNMS (librenms/librenms) contains a Stored XSS vulnerability that affects versions before 22.2.2. Root cause: improper handling/validation of client-side data in the web application. Impact per sources: Cross-site scripting with potential for user-assisted or automatic execution of client-sid...
CVE-2022-0772 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
Authorization
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0589 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...
