1211 matches found
GHSA-5JJM-QP48-QP86 LibreNMS Cross-site Scripting vulnerability
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
LibreNMS Code Injection vulnerability
Code Injection in GitHub repository librenms/librenms prior to 23.9.0...
LibreNMS Cross-site Scripting vulnerability
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
LibreNMS Cross-site Scripting vulnerability
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
LibreNMS Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
LibreNMS Cross-site Scripting vulnerability
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4981
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4978
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4980
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4982
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4979
Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4977
Code Injection in GitHub repository librenms/librenms prior to 23.9.0...
Code injection
Code Injection in GitHub repository librenms/librenms prior to 23.9.0...
Cross site scripting
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4982
CVE-2023-4982 is a stored XSS in librenms/librenms prior to 23.9.0. The vulnerability arises from insufficient sanitization/escaping of HTML characters, notably in includes/html/pages/search/fdb.inc.php (per Veracode). Exploitation can lead to cookie theft or user account compromise, or redirecti...