10 matches found
CVE-2026-109354
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...
CVE-2026-109354 LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...
EUVD-2026-97656
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...
CVE-2026-109354 LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...
CVE-2026-109354
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...
CVE-2026-109354
LibreNMS versions prior to 26.9.0 are vulnerable to a path traversal vulnerability in the nfsen_channel_common.inc.php component. This flaw allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. An attacker with access to a single NFSen-ena...
CVE-2026-109354 LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...
CVE-2026-109354: Improper Limitation of a Pathname to a Restricted Directory
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traverse...
PT-2026-110771
Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 26.9.0 Description A path traversal issue exists in the nfsen channel common.inc.php file. Authenticated users can read unauthorized RRD Round Robin Database data by injecting ../ sequences into the channel parameter...
Collectd-Web 0.4.0 Cross Site Scripting
Title -Collectd-web XSS Exploit Title : XSS Vulnerabilitie in Collectd-web Date: Sun May 22 11:55:36 EDT 2016 Reported Date : Sun May 22 11:55:36 EDT 2016 Vendor Homepage: https://collectd.org/wiki/index.php/Collectd-web Version: Version: 0.4.0 Software Link: https://github.com/httpdss/collectd-w...