librenms

51 results · Clear filters · Feed

• Medium 5.3
  CVE-2023-46745

  Rate limiting Bypass on login page in libreNMS

  LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions the login method has no rate limit. An attacker may be able to leverage this vulner…

  librenms librenms librenms/librenms Packagist
  Nov 17, 2023
• Medium 4.3
  CVE-2023-48294

  Broken Access control on Graphs Feature in LibreNMS

  LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions of LibreNMS when a user accesses their device dashboard, one request is sent to `gr…

  librenms librenms librenms/librenms Packagist
  Nov 17, 2023
• Medium 6.3
  CVE-2023-48295

  Cross-site Scripting at Device groups Deletion feature in LibreNMS

  LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. Affected versions are subject to a cross site scripting (XSS) vulnerability in the device group popups. …

  librenms librenms librenms/librenms Packagist
  Nov 17, 2023
• Medium 4.3
  CVE-2022-3562 EPSS 94%

  Cross-site Scripting (XSS) - Stored in librenms/librenms

  Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

  librenms librenms/librenms librenms/librenms Packagist
  Nov 20, 2022
• Medium 5.7
  CVE-2022-3516

  Cross-site Scripting (XSS) - Stored in librenms/librenms

  Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

  librenms librenms/librenms librenms/librenms Packagist
  Nov 20, 2022
• Medium 4.3
  CVE-2022-3561

  Cross-site Scripting (XSS) - Generic in librenms/librenms

  Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.

  librenms librenms/librenms librenms/librenms Packagist
  Nov 20, 2022
• Medium 5.6
  CVE-2022-3231

  Cross-site Scripting (XSS) - Stored in librenms/librenms

  Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.

  librenms librenms/librenms librenms/librenms Packagist
  Sep 17, 2022
• Medium 4.7
  CVE-2022-0772

  Cross-site Scripting (XSS) - Stored in librenms/librenms

  Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2.

  librenms librenms/librenms librenms/librenms Packagist
  Feb 27, 2022
• Medium 5.4
  CVE-2022-0589

  Cross-site Scripting (XSS) - Stored in librenms/librenms

  Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0.

  librenms librenms/librenms librenms/librenms Packagist
  Feb 15, 2022
• Medium 5.4
  CVE-2022-0575

  Cross-site Scripting (XSS) - Stored in librenms/librenms

  Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.

  librenms librenms/librenms librenms/librenms Packagist
  Feb 13, 2022
• Medium 5.4
  CVE-2022-0576

  Cross-site Scripting (XSS) - Generic in librenms/librenms

  Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.

  librenms librenms/librenms librenms/librenms Packagist
  Feb 13, 2022