Lucene search
+L

1211 matches found

Veracode
Veracode
added 2021/12/02 4:21 a.m.18 views

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to cross-site scripting. The library does not properly escape the user input strings in the $url field in showconfig.inc.php, allowing an attacker to inject and execute malicious javascript...

6.1CVSS3.1AI score0.00628EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2021/12/02 12:0 a.m.50 views

Librenms Cross-Site Scripting Vulnerability (CNVD-2021-95231)

Librenms is a PHP and MySQL based open source network monitoring system for the Librenms community. The system features custom alerts, auto-discovery of network environments, and automatic updates.Librenms suffers from a cross-site scripting vulnerability that originates in...

6.1CVSS2.3AI score0.00628EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/02 12:0 a.m.41 views

Librenms Cross-Site Scripting Vulnerability (CNVD-2021-95230)

Librenms is a Librenms community PHP and MySQL-based open source network monitoring system . The system features custom alerts, auto-discovery of network environments and automatic updates.Librenms version 21.11.0 has a cross-site scripting vulnerability that can be exploited by attackers via...

6.1CVSS4AI score0.00628EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/01 2:15 p.m.25 views

CVE-2021-44279

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/forms/poller-groups.inc.php...

6.1CVSS0.00628EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/01 2:15 p.m.31 views

CVE-2021-44277

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/common/alert-log.inc.php...

6.1CVSS0.00628EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/01 2:15 p.m.6 views

CVE-2021-44277

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/common/alert-log.inc.php...

6.1CVSS6.3AI score0.00628EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/01 2:15 p.m.15 views

CVE-2021-44277

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/common/alert-log.inc.php...

6.1CVSS5.8AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/01 2:15 p.m.5 views

CVE-2021-44279

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/forms/poller-groups.inc.php...

6.1CVSS6.3AI score0.00628EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/01 2:15 p.m.14 views

CVE-2021-44279

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/forms/poller-groups.inc.php...

6.1CVSS5.8AI score
SaveExploits0References1
Prion
Prion
added 2021/12/01 2:15 p.m.18 views

Cross site scripting

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/forms/poller-groups.inc.php...

4.3CVSS6AI score0.00628EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/01 2:15 p.m.22 views

Cross site scripting

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/common/alert-log.inc.php...

4.3CVSS6AI score0.00628EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/01 1:36 p.m.30 views

CVE-2021-44277

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/common/alert-log.inc.php...

6.1AI score0.00628EPSS
SaveExploits1References1
CVE
CVE
added 2021/12/01 1:36 p.m.72 views

CVE-2021-44277

LibreNMS 21.11.0 is affected by a cross-site scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php. The connected sources identify the vulnerable component and version, but do not provide exploit specifics or a confirmed patch/mitigation in the supplied materials.

6.1CVSS5.9AI score0.00628EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/12/01 1:9 p.m.84 views

CVE-2021-44279

CVE-2021-44279 : LibreNMS 21.11.0 is affected by a Cross-Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php caused by insufficient HTML escaping. The issue is confirmed across multiple sources (NVD entry and vendor advisories) and is exploitable via crafted input in t...

6.1CVSS5.9AI score0.00628EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/01 1:9 p.m.26 views

CVE-2021-44279

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/forms/poller-groups.inc.php...

6.1AI score0.00628EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/01 12:0 a.m.8 views

Librenms 跨站脚本漏洞

Librenms is a Librenms community PHP and MySQL-based open source network monitoring system . The system features custom alerts, auto-discovery of network environments and automatic updates.Librenms version 21.11.0 has a cross-site scripting vulnerability that can be exploited by attackers via...

6.1CVSS5.2AI score0.00628EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/12/01 12:0 a.m.7 views

Librenms 跨站脚本漏洞

Librenms is a PHP and MySQL based open source network monitoring system for the Librenms community. The system features custom alerts, auto-discovery of network environments, and automatic updates.Librenms suffers from a cross-site scripting vulnerability that originates in...

6.1CVSS5.2AI score0.00628EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
added 2021/11/28 12:0 a.m.67 views

LibreNMS addhost Command Injection (CVE-2018-20434)

A command injection vulnerability exists in LibreNMS. This vulnerability is due to incorrect parsing of the community HTTP header. A remote attacker can exploit this vulnerability by sending a crafted HTTP request to the target server...

10CVSS9.2AI score0.71487EPSS
SaveExploits9
Github Security Blog
Github Security Blog
added 2021/11/08 5:59 p.m.41 views

Cross-site Scripting in LibreNMS

LibreNMS through 21.10.2 allows XSS via a widget title...

6.1CVSS2.6AI score0.00628EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/11/08 5:59 p.m.17 views

GHSA-46RX-6JG9-4FH8 Cross-site Scripting in LibreNMS

LibreNMS through 21.10.2 allows XSS via a widget title...

6.1CVSS5.8AI score0.00628EPSS
SaveExploits0References3
Rows per page
Query Builder