CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. |
| 20/11/2022 |
| CVE-2022-4068 | 보통5.4 | A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context | 20/11/2022 |
| CVE-2022-4067 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3562 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3561 | 보통6.1 | Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3525 | 높음8.8 | Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3516 | 보통6.1 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3231 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0. | 17/09/2022 |
| CVE-2022-36746 | 보통6.1 | LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php. | 30/08/2022 |
| CVE-2022-36745 | 보통6.1 | LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php. | 30/08/2022 |
| CVE-2022-29712 | 심각9.8 | LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters. | 02/06/2022 |
| CVE-2022-29711 | 보통6.1 | LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php. | 02/06/2022 |
| CVE-2022-0772 | 보통4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2. | 27/02/2022 |
| CVE-2022-0589 | 보통5.4 | Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0. | 15/02/2022 |
| CVE-2022-0588 | 보통6.5 | Missing Authorization in Packagist librenms/librenms prior to 22.2.0. | 15/02/2022 |
| CVE-2022-0587 | 보통6.5 | Improper Authorization in Packagist librenms/librenms prior to 22.2.0. | 15/02/2022 |