Vendor

librenms

95 known vulnerabilities.

Products

librenms 70 librenms/librenms 25

All Critical High Medium Low Exploited only Public exploit

95 results · Feed

Low 3.4

CVE-2022-4069 EPSS 93%

Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.

librenms librenms/librenms librenms/librenms Packagist

Nov 20, 2022
High 7.6

CVE-2022-4068 EPSS 38%

Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms

A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low p…

librenms librenms/librenms librenms/librenms Packagist

Nov 20, 2022
Low 3.4

CVE-2022-4067 EPSS 94%

Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

librenms librenms/librenms librenms/librenms Packagist

Nov 20, 2022
Medium 4.3

CVE-2022-3562 EPSS 94%

Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

librenms librenms/librenms librenms/librenms Packagist

Nov 20, 2022
Medium 5.7

CVE-2022-3516

Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

librenms librenms/librenms librenms/librenms Packagist

Nov 20, 2022
Medium 4.3

CVE-2022-3561

Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.

librenms librenms/librenms librenms/librenms Packagist

Nov 20, 2022
Critical 9.0

CVE-2022-3525

Deserialization of Untrusted Data in librenms/librenms

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.

librenms librenms/librenms librenms/librenms Packagist

Nov 20, 2022
Medium 5.6

CVE-2022-3231

Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.

librenms librenms/librenms librenms/librenms Packagist

Sep 17, 2022
Medium 4.7

CVE-2022-0772

Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2.

librenms librenms/librenms librenms/librenms Packagist

Feb 27, 2022
Medium 5.4

CVE-2022-0589

Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0.

librenms librenms/librenms librenms/librenms Packagist

Feb 15, 2022
High 7.1

CVE-2022-0588

Missing Authorization in librenms/librenms

Missing Authorization in Packagist librenms/librenms prior to 22.2.0.

librenms librenms/librenms librenms/librenms Packagist

Feb 15, 2022
High 7.1

CVE-2022-0587

Improper Authorization in librenms/librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0.

librenms librenms/librenms librenms/librenms Packagist

Feb 15, 2022
High 7.1

CVE-2022-0580

Incorrect Authorization in librenms/librenms

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.

librenms librenms/librenms librenms/librenms Packagist

Feb 14, 2022
Medium 5.4

CVE-2022-0575

Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.

librenms librenms/librenms librenms/librenms Packagist

Feb 13, 2022
Medium 5.4

CVE-2022-0576

Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.

librenms librenms/librenms librenms/librenms Packagist

Feb 13, 2022