1619 matches found
Unspecified Vulnerability in LibreNMS
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0, which stems fro...
LibreNMS Cross-Site Scripting Vulnerability (CNVD-2022-81234)
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in update function of UserController.php because the username is not properly sanitized in the admin user overview which allows an attacker to inject and execute arbitrary javascript...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists in notifications.inc.php due to lack of escaping in title which allows an attacker to inject and execute malicious javascript...
Cross-Site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in the title parameter of notifications.inc.php, allowing an attacker to inject and execute malicious javascript...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation in the map items in print-alert-rules.php, which allows a remote attacker to inject and execute malicious JavaScript into the system...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in the billname attribute in the printportlist function of bill.inc.php, allowing an attacker to inject and execute malicious javascript...
Deserialization of Untrusted Data in librenms/librenms
Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...
Cross-site Scripting in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...
GHSA-F3HW-3H74-WR98 Cross-site Scripting in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary...
GHSA-QCH4-JMF8-XVP7 Cross-site Scripting in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...
GHSA-264W-GW9G-FHGJ Cross-site Scripting in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
Cross-site Scripting in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
GHSA-P55M-G4M3-QMRP Cross-site Scripting in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-4069
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-4070
Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3525
Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3562
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...