Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 23.9.0.
- Обновитесь до 23.9.0
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости librenms/librenms · Страница 4
За последние 30 дней в librenms/librenms опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 106
Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0.
- Обновитесь до 23.9.0
Опубликовано ОбновленоCross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 23.9.0.
- Обновитесь до 23.9.0
Опубликовано ОбновленоCross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0.
- Обновитесь до 23.9.0
Опубликовано ОбновленоCross-site Scripting (XSS) - Reflected in librenms/librenms
Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.9.0.
- Обновитесь до 23.9.0
Опубликовано ОбновленоCode Injection in librenms/librenms
Code Injection in GitHub repository librenms/librenms prior to 23.9.0.
- Обновитесь до 23.9.0
Опубликовано ОбновленоCross-site Scripting (XSS) - Reflected in librenms/librenms
Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0.
- Обновитесь до 23.8.0
Опубликовано ОбновленоInsufficient Session Expiration in librenms/librenms
Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.
- Обновитесь до 22.10.0
Опубликовано ОбновленоCross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
- Обновитесь до 22.10.0
Опубликовано ОбновленоImproperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context of an admin's account.
- Обновитесь до 22.10.0
Опубликовано ОбновленоCross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
- Обновитесь до 22.10.0
Опубликовано ОбновленоCross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
- Обновитесь до 22.10.0
Опубликовано ОбновленоCross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
- Обновитесь до 22.10.0
Опубликовано ОбновленоDeserialization of Untrusted Data in librenms/librenms
Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.
- Обновитесь до 22.10.0
Опубликовано ОбновленоCross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
- Обновитесь до 22.10.0
Опубликовано ОбновленоCross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.
- Обновитесь до 22.9.0
Опубликовано ОбновленоCVE-2022-36746
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php.
- Обновитесь до 22.7.0
Опубликовано ОбновленоCVE-2022-36745
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php.
- Обновитесь до 22.7.0
Опубликовано ОбновленоCVE-2022-29712
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters.
- Обновитесь до 22.4.0
Опубликовано ОбновленоCVE-2022-29711
LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php.
- Обновитесь до 22.4.0
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.