CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. |
| 20/11/2022 |
| CVE-2022-4068 | MÉDIO5.4 | A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context | 20/11/2022 |
| CVE-2022-4067 | MÉDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3562 | MÉDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3561 | MÉDIO6.1 | Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3525 | ALTO8.8 | Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3516 | MÉDIO6.1 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3231 | MÉDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0. | 17/09/2022 |
| CVE-2022-36746 | MÉDIO6.1 | LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php. | 30/08/2022 |
| CVE-2022-36745 | MÉDIO6.1 | LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php. | 30/08/2022 |
| CVE-2022-29712 | CRÍTICO9.8 | LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters. | 02/06/2022 |
| CVE-2022-29711 | MÉDIO6.1 | LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php. | 02/06/2022 |
| CVE-2022-0772 | MÉDIO4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2. | 27/02/2022 |
| CVE-2022-0589 | MÉDIO5.4 | Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0. | 15/02/2022 |
| CVE-2022-0588 | MÉDIO6.5 | Missing Authorization in Packagist librenms/librenms prior to 22.2.0. | 15/02/2022 |
| CVE-2022-0587 | MÉDIO6.5 | Improper Authorization in Packagist librenms/librenms prior to 22.2.0. | 15/02/2022 |