1634 matches found
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scriptingXSS attacks. The library does not properly escape the special characters in formatMessage function in GraylogController.php file, allowing an attacker to inject and execute malicious javascript...
Command injection in librenms
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
Cross site scripting in librenms
LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...
GHSA-23F2-VGR6-FWV7 Command injection in librenms
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
GHSA-2GQG-2RG7-GH33 Cross site scripting in librenms
LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...
CVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
CVE-2022-29711
LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...
CVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
CVE-2022-29711
LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...
Command injection
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
Cross site scripting
LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...
LibreNMS 跨站脚本漏洞
LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments and automatic updates.LibreNMS v22.3.0 version contains a cross-site scripting vulnerability that originates from the...
LibreNMS 命令注入漏洞
LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. LibreNMS v22.3.0 contains a command injection vulnerability that stems from the failure of the serviceip, hostname and serviceparam parameters to properly filter the construct command special...
CVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
CVE-2022-29712
CVE-2022-29712 : Several command injection vulnerabilities are present in LibreNMS v22.3.0, arising from the failure to properly filter construct commands via the parameters service_ip , hostname , and service_param . The affected software is LibreNMS (v22.3.0 as stated in connected documents). T...
CVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
CVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the serviceip, hostname, and serviceparam parameters...
CVE-2022-29711
LibreNMS v22.3.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /Table/GraylogController.php...
CVE-2022-29711
LibreNMS v22.3.0 contains a cross-site scripting (XSS) vulnerability in the component /Table/GraylogController.php due to lack of proper data validation/escaping. This is the root cause described across multiple sources (e.g., NVD, Red Hat, CNVD, OSV, GHSA). Impact: attacker can execute JavaScrip...