Show filters
82 Total Results
Displaying 41-50 of 82
Sort by:
Attacker Value
Unknown

CVE-2022-4067

Disclosure Date: November 20, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
Attacker Value
Unknown

CVE-2022-4069

Disclosure Date: November 20, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
Attacker Value
Unknown

CVE-2022-4070

Disclosure Date: November 20, 2022 (last updated February 24, 2025)
Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.
Attacker Value
Unknown

CVE-2022-3561

Disclosure Date: November 20, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
Attacker Value
Unknown

CVE-2022-4068

Disclosure Date: November 20, 2022 (last updated February 24, 2025)
A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context of an admin's account.
Attacker Value
Unknown

CVE-2022-3525

Disclosure Date: November 20, 2022 (last updated February 24, 2025)
Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.
Attacker Value
Unknown

CVE-2022-3516

Disclosure Date: November 20, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
Attacker Value
Unknown

CVE-2022-3231

Disclosure Date: September 17, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.
Attacker Value
Unknown

CVE-2022-36746

Disclosure Date: August 30, 2022 (last updated February 24, 2025)
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php.
Attacker Value
Unknown

CVE-2022-36745

Disclosure Date: August 30, 2022 (last updated February 24, 2025)
LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php.