Librenms

librenms

104 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Librenms

librenms

104 CVEs

CVEs (104)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4347 1Librenms 1Librenms Jun 17, 2026 Aug 15, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0.
CVE-2022-4070 1Librenms 1Librenms Jun 17, 2026 Nov 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.
CVE-2022-4069 1Librenms 1Librenms Jun 17, 2026 Nov 20, 2022 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
CVE-2022-4068 1Librenms 1Librenms Jun 17, 2026 Nov 20, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attac...Show more A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context of an admin's account.Show less
CVE-2022-4067 1Librenms 1Librenms Jun 17, 2026 Nov 20, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
CVE-2022-3562 1Librenms 1Librenms Jun 17, 2026 Nov 20, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
CVE-2022-3561 1Librenms 1Librenms Jun 17, 2026 Nov 20, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
CVE-2022-3525 1Librenms 1Librenms Jun 17, 2026 Nov 20, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.
CVE-2022-3516 1Librenms 1Librenms Jun 17, 2026 Nov 20, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
CVE-2022-3231 1Librenms 1Librenms Jun 17, 2026 Sep 17, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.
CVE-2022-36746 1Librenms 1Librenms Jun 17, 2026 Aug 30, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php.
CVE-2022-36745 1Librenms 1Librenms Jun 17, 2026 Aug 30, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php.
CVE-2022-29712 1Librenms 1Librenms Jun 17, 2026 Jun 2, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters.
CVE-2022-29711 1Librenms 1Librenms Jun 17, 2026 Jun 2, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php.
CVE-2022-0772 1Librenms 1Librenms Jun 17, 2026 Feb 27, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2.
CVE-2022-0589 1Librenms 1Librenms Jun 17, 2026 Feb 15, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0.
CVE-2022-0588 1Librenms 1Librenms Jun 17, 2026 Feb 15, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Missing Authorization in Packagist librenms/librenms prior to 22.2.0.
CVE-2022-0587 1Librenms 1Librenms Jun 17, 2026 Feb 15, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Improper Authorization in Packagist librenms/librenms prior to 22.2.0.
CVE-2022-0580 1Librenms 1Librenms Jun 17, 2026 Feb 14, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.
CVE-2022-0576 1Librenms 1Librenms Jun 17, 2026 Feb 14, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.

Previous 1 2 345 6 Next