CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. |
| 20/11/2022 |
| CVE-2022-4068 | 中危5.4 | A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context | 20/11/2022 |
| CVE-2022-4067 | 中危5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3562 | 中危5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3561 | 中危6.1 | Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3525 | 高危8.8 | Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3516 | 中危6.1 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0. | 20/11/2022 |
| CVE-2022-3231 | 中危5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0. | 17/09/2022 |
| CVE-2022-36746 | 中危6.1 | LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php. | 30/08/2022 |
| CVE-2022-36745 | 中危6.1 | LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php. | 30/08/2022 |
| CVE-2022-29712 | 严重9.8 | LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters. | 02/06/2022 |
| CVE-2022-29711 | 中危6.1 | LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php. | 02/06/2022 |
| CVE-2022-0772 | 中危4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2. | 27/02/2022 |
| CVE-2022-0589 | 中危5.4 | Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0. | 15/02/2022 |
| CVE-2022-0588 | 中危6.5 | Missing Authorization in Packagist librenms/librenms prior to 22.2.0. | 15/02/2022 |
| CVE-2022-0587 | 中危6.5 | Improper Authorization in Packagist librenms/librenms prior to 22.2.0. | 15/02/2022 |