Skip to content
OpenAdvisories

Package · Packagist

librenms/librenms

106 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

55 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-36745

    LibreNMS vulnerable to Cross-Site Scripting (XSS)

    LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php.

    librenms/librenms Packagist
  • Medium 6.1
    CVE-2022-36746

    LibreNMS vulnerable to Cross-Site Scripting (XSS)

    LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php.

    librenms/librenms Packagist
  • Medium 6.1
    CVE-2022-29711

    Cross site scripting in librenms

    LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php.

    librenms/librenms Packagist
  • Medium 4.7
    CVE-2022-0772

    Cross-site Scripting (XSS) - Stored in librenms/librenms

    Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2.

    librenms librenms/librenms librenms/librenms Packagist
  • Medium 5.4
    CVE-2022-0589

    Cross-site Scripting (XSS) - Stored in librenms/librenms

    Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0.

    librenms librenms/librenms librenms/librenms Packagist
  • Medium 5.4
    CVE-2022-0575

    Cross-site Scripting (XSS) - Stored in librenms/librenms

    Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.

    librenms librenms/librenms librenms/librenms Packagist
  • Medium 5.4
    CVE-2022-0576

    Cross-site Scripting (XSS) - Generic in librenms/librenms

    Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.

    librenms librenms/librenms librenms/librenms Packagist
  • Medium 6.1
    CVE-2021-44277

    Cross-site Scripting in LibreNMS

    Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php.

    librenms/librenms Packagist
  • Medium 6.1
    CVE-2021-44279

    Cross-site Scripting in LibreNMS

    Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php.

    librenms/librenms Packagist
  • Medium 6.1
    CVE-2021-43324

    Cross-site Scripting in LibreNMS

    LibreNMS through 21.10.2 allows XSS via a widget title.

    librenms/librenms Packagist
  • Medium 5.4
    CVE-2021-31274

    Cross-site Scripting in LibreNMS

    In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api->description variable. As a result, arbitrary Javascript code can get executed.

    librenms/librenms Packagist
  • Medium 6.5
    CVE-2020-15873 Public exploit

    LibreNMS SQL Injection vulnerability

    In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.

    librenms/librenms Packagist
  • Medium 5.3
    CVE-2019-10667

    Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS

    An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.

    librenms/librenms Packagist
  • Medium 6.1
    CVE-2018-18478

    LibreNMS XSS Vulnerability

    Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameter in the /ajax_form.php resource, related to html/includes/forms/add-dashboard.inc.php, html/incl…

    librenms/librenms Packagist
  • Medium 5.9
    CVE-2017-16759

    LibreNMS Arbitrary File Read

    The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.

    librenms/librenms Packagist