1617 matches found
CVE-2023-48295: Improper Neutralization of Input During Web Page Generation
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. Affected versions are subject to a cross site scripting XSS vulnerability in the device group popups. This issue has been addressed in commit...
CVE-2023-48294: Exposure of Sensitive Information to an Unauthorized Actor
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions of LibreNMS when a user accesses their device dashboard, one request is sent to graph.php to access graphs generated on t...
PT-2023-30180 · Librenms · Librenms
Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 23.11.0 Description: The issue concerns the login method in LibreNMS, which lacks a rate limit, allowing an attacker to potentially gain access to user accounts through brute force attacks. The login method uses a G...
SQL Injection
librenms/librenms is vulnerable to SQL Injection. The vulnerability exists because the the search query is not properly sanitized which allows an attacker to extract the whole database...
GHSA-MR6H-7X2M-RGMQ SQL injection in librenms/librenms
SQL Injection in GitHub repository librenms/librenms prior to 23.10.0...
CVE-2023-5591
SQL Injection in GitHub repository librenms/librenms prior to 23.10.0...
Sql injection
SQL Injection in GitHub repository librenms/librenms prior to 23.10.0...
CVE-2023-5591 SQL Injection in librenms/librenms
SQL Injection in GitHub repository librenms/librenms prior to 23.10.0...
CVE-2023-5591
SQL Injection in GitHub repository librenms/librenms prior to 23.10.0...
CVE-2023-5591 SQL Injection in librenms/librenms
SQL Injection in GitHub repository librenms/librenms prior to 23.10.0...
CVE-2023-5591
CVE-2023-5591 describes a SQL injection vulnerability in the open-source monitoring project Libremnms/librenms prior to version 23.10.0. The vulnerability affects the Librenms codebase (Librenms/librenms) and is documented across multiple sources (NVD, Red Hat, OSV, GHSA, CVE lists, and PT Securi...
LibreNMS SQL Injection Vulnerability
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments and automatic updates. LibreNMS versions prior to 23.10.0 are vulnerable to a SQL injection vulnerability that...
CVE-2023-5591: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in GitHub repository librenms/librenms prior to 23.10.0...
PT-2023-32201 · Librenms · Librenms
Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.10.0 Description: The issue is related to SQL Injection in the GitHub repository librenms/librenms. Recommendations: For versions prior to 23.10.0, update to version 23.10.0 or later to resolve the issue...
Cross Site Scripting (XSS)
librenms/librenms is vulnerable to DOM based Cross Site Scripting XSS. The vulnerability is caused by not sanitizing/escaping HTML special characters in a IPV6/IPV4 search field in includes/html/pages/search/ipv6.inc.php while searching for IPV4/IPv6 addresses. This can result in disclosure of th...
Cross Site Scripting (XSS)
librenms/librenms is vulnerable to Cross Site Scripting XSS. The vulnerability is caused by not sanitizing/escaping HTML special characters in includes/html/pages/search/fdb.inc.php file. This can lead to stealing user's cookies, gain unauthorized access to that user's account through stolen...
Code Injection
librenms/librenms is vulnerable to Code Injection. The vulnerability is due to the search.inc.php as there is no proper sanitization for the searchtype which can result in HTML Injection...
Cross-site Scripting
librenms/librenms is vulnerable to Cross-site Scripting. The vulnerability is due to the hostname variable in the ports.inc.php file not being properly sanitized, which can result in cross cite scripting...
