Latest vulnerabilities for vendor "librenms"

7.5

First published (updated )

CVE-2024-52526

composer/librenms/librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php

7.5

First published (updated )

CVE-2024-51497

composer/librenms/librenmsLibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php

7.5

First published (updated )

CVE-2024-51496

composer/librenms/librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php

7.5

First published (updated )

CVE-2024-51495

composer/librenms/librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php

7.5

First published (updated )

CVE-2024-51494

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/librenms/librenmsLibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints

7.2

First published (updated )

CVE-2024-50355

composer/librenms/librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php

7.5

First published (updated )

CVE-2024-50352

composer/librenms/librenmsLibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php

7.5

First published (updated )

CVE-2024-50351

composer/librenms/librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php

7.5

First published (updated )

CVE-2024-50350

composer/librenms/librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php

7.5

First published (updated )

CVE-2024-49764

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/librenms/librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php

7.5

First published (updated )

CVE-2024-49759

composer/librenms/librenmsLibreNMS has a stored XSS in ExamplePlugin with Device's Notes

6.8

First published (updated )

CVE-2024-49758

composer/librenms/librenmsLibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php

7.5

First published (updated )

CVE-2024-49754

composer/librenms/librenmsLibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature

7.5

First published (updated )

CVE-2024-47523

composer/librenms/librenmsStored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php

7.5

First published (updated )

CVE-2024-47525

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/librenms/librenmsLibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php

7.5

First published (updated )

CVE-2024-47527

composer/librenms/librenmsRate limiting Bypass on login page in libreNMS

7.5

First published (updated )

CVE-2023-46745

composer/librenms/librenmsBroken Access control on Graphs Feature in LibreNMS

4.3

First published (updated )

CVE-2023-48294

composer/librenms/librenmsCross-site Scripting at Device groups Deletion feature in LibreNMS

6.3

First published (updated )

CVE-2023-48295

composer/librenms/librenmsSQL Injection in librenms/librenms

7.8

EPSS

0.05%

First published (updated )

CVE-2023-5591

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Librenms LibrenmsCross-site Scripting (XSS) - DOM in librenms/librenms

8.4

EPSS

0.05%

First published (updated )

CVE-2023-5060

composer/librenms/librenmsCross-site Scripting (XSS) - Stored in librenms/librenms

9.8

First published (updated )

CVE-2023-4982

composer/librenms/librenmsCross-site Scripting (XSS) - DOM in librenms/librenms

8.8

First published (updated )

CVE-2023-4981

composer/librenms/librenmsCross-site Scripting (XSS) - Generic in librenms/librenms

8.8

First published (updated )

CVE-2023-4980

composer/librenms/librenmsCross-site Scripting (XSS) - DOM in librenms/librenms

9

First published (updated )

CVE-2023-4978

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/librenms/librenmsCode Injection in librenms/librenms

7.3

First published (updated )

CVE-2023-4977

Librenms LibrenmsCross-site Scripting (XSS) - Reflected in librenms/librenms

8.8

First published (updated )

CVE-2023-4979

composer/librenms/librenmsCross-site Scripting (XSS) - Reflected in librenms/librenms

7.6

First published (updated )

CVE-2023-4347

Librenms LibrenmsDeserialization of Untrusted Data in librenms/librenms

9

First published (updated )

CVE-2022-3525

Librenms LibrenmsInsufficient Session Expiration in librenms/librenms

9.8

First published (updated )

CVE-2022-4070

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Librenms LibrenmsImproperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms

7.6

First published (updated )

CVE-2022-4068

Librenms LibrenmsCross-site Scripting (XSS) - Stored in librenms/librenms

5.4

First published (updated )

CVE-2022-4067

Librenms LibrenmsCross-site Scripting (XSS) - Stored in librenms/librenms

5.4

First published (updated )

CVE-2022-3562

Librenms LibrenmsCross-site Scripting (XSS) - Generic in librenms/librenms

6.1

First published (updated )

CVE-2022-3561

Librenms LibrenmsCross-site Scripting (XSS) - Generic in librenms/librenms

4.8

First published (updated )

CVE-2022-4069

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Librenms LibrenmsCross-site Scripting (XSS) - Stored in librenms/librenms

6.1

First published (updated )

CVE-2022-3516

Librenms LibrenmsCross-site Scripting (XSS) - Stored in librenms/librenms

5.6

First published (updated )

CVE-2022-3231

Librenms LibrenmsXSS

6.1

First published (updated )

CVE-2022-36745

Librenms LibrenmsXSS

6.1

First published (updated )

CVE-2022-36746

Librenms LibrenmsCommand Injection

9.8

First published (updated )

CVE-2022-29712

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Librenms LibrenmsXSS

6.1

First published (updated )

CVE-2022-29711

Librenms LibrenmsCross-site Scripting (XSS) - Stored in librenms/librenms

4.8

First published (updated )

CVE-2022-0772

Librenms LibrenmsCross-site Scripting (XSS) - Stored in librenms/librenms

5.4

First published (updated )

CVE-2022-0589

Librenms LibrenmsMissing Authorization in librenms/librenms

7.1

First published (updated )

CVE-2022-0588

Librenms LibrenmsImproper Authorization in librenms/librenms

7.1

First published (updated )

CVE-2022-0587

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Librenms LibrenmsIncorrect Authorization in librenms/librenms

8.8

First published (updated )

CVE-2022-0580

Librenms LibrenmsCross-site Scripting (XSS) - Stored in librenms/librenms

5.4

First published (updated )

CVE-2022-0575

Librenms LibrenmsCross-site Scripting (XSS) - Generic in librenms/librenms

6.1

First published (updated )

CVE-2022-0576

Librenms LibrenmsPath Traversal

9.8

First published (updated )

CVE-2021-44278

composer/librenms/librenmsXSS

6.1

First published (updated )

CVE-2021-44277

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.