1211 matches found
CVE-2022-4067
LibreNMS (librenms/librenms) is affected by a stored Cross-site Scripting (XSS) vulnerability in versions prior to 22.10.0. Root cause cited in sources is stored XSS; impact is consistent with XSS in the web UI. Remediation: upgrade to version 22.10.0 or later to resolve the issue. Public referen...
CVE-2022-3561
CVE-2022-3561 is a Cross-site Scripting (XSS) vulnerability affecting LibreNMS (librenms/librenms) prior to version 22.10.0. The issue is described as a generic XSS vulnerability in the Librenms codebase (no vendor-specific details beyond the Librenms repository). Affected versions are prior to 2...
CVE-2022-4069
CVE-2022-4069 affects librenms/librenms prior to 22.10.0. The vulnerability is a Cross-site Scripting (XSS) flaw arising from insufficient input validation in web UI components, notably in destroy-related code paths (e.g., DeviceGroupController.php and PortGroupController.php) that process pop-up...
CVE-2022-3516
CVE-2022-3516 affects LibreNMS installations with versions prior to 22.10.0. The issue is a stored Cross-site Scripting (XSS) vulnerability in the project’s web-facing components, allowing an attacker to inject and persist malicious script that can execute in an authenticated user’s browser after...
LibreNMS 代码问题漏洞
LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. The system features custom alerts, auto-discovery of network environments, and automatic updates.LibreNMS versions prior to 22.10.0 have a security vulnerability that stems from insufficient sessi...
PT-2022-22608 · Librenms · Librenms
Name of the Vulnerable Software and Affected Versions: librenms versions prior to 22.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository librenms/librenms. Recommendations: For versions prior to 22.10.0, update to version 22.10.0 or lat...
LibreNMS 跨站脚本漏洞
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from the...
CVE-2022-4070
LibreNMS (librenms/librenms) is affected by CVE-2022-4070: Insufficient session expiration prior to version 22.10.0. The vulnerability stems from inadequate session expiration handling in LibreNMS before 22.10.0 and is documented across multiple sources (including Red Hat, GHSA, CNVD, NVD, OSV). ...
LibreNMS 代码问题漏洞
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...
CVE-2022-4070 Insufficient Session Expiration in librenms/librenms
Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3561 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-4069 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-4070 Insufficient Session Expiration in librenms/librenms
Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3525 Deserialization of Untrusted Data in librenms/librenms
Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...
LibreNMS 跨站脚本漏洞
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0, which stems fro...
LibreNMS 跨站脚本漏洞
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of the network environment and automatic updates. A security vulnerability exists in LibreNMS versions prior to 22.10.0 that stems from...
CVE-2022-4067 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3562 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...
PT-2022-22923 · Librenms · Librenms
Name of the Vulnerable Software and Affected Versions: librenms versions prior to 22.10.0 Description: The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository librenms/librenms. Recommendations: For versions prior to 22.10.0, update to version 22.10.0 or later to resol...
