Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
librenms librenms vulnerabilities and exploits
(subscribe to this query)
5.3
CVSSv3
CVE-2019-10667
An issue exists in LibreNMS up to and including 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.
Librenms Librenms
7.2
CVSSv3
CVE-2019-10669
An issue exists in LibreNMS up to and including 1.47. There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function. This function is not the appropriate function ...
Librenms Librenms
1 EDB exploit
8.8
CVSSv3
CVE-2019-10671
An issue exists in LibreNMS up to and including 1.47. It does not parameterize all user supplied input within database queries, resulting in SQL injection. An authenticated attacker can subvert these database queries to extract or manipulate data, as demonstrated by the graph.php...
Librenms Librenms
5.4
CVSSv3
CVE-2023-4347
Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms before 23.8.0.
Librenms Librenms
6.1
CVSSv3
CVE-2021-43324
LibreNMS up to and including 21.10.2 allows XSS via a widget title.
Librenms Librenms
1 Github repository
5.9
CVSSv3
CVE-2017-16759
The installation process in LibreNMS prior to 2017-08-18 allows remote malicious users to read arbitrary files, related to html/install.php.
Librenms Librenms
5.4
CVSSv3
CVE-2022-3231
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms before 22.9.0.
Librenms Librenms
4.8
CVSSv3
CVE-2022-0772
Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms before 22.2.2.
Librenms Librenms
9.1
CVSSv3
CVE-2019-10668
An issue exists in LibreNMS up to and including 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and are not expected ...
Librenms Librenms
6.1
CVSSv3
CVE-2019-10670
An issue exists in LibreNMS up to and including 1.47. Many of the scripts rely on the function mysqli_escape_real_string for filtering data. However, this is particularly ineffective when returning user supplied input in an HTML or a JavaScript context, resulting in unsafe data b...
Librenms Librenms
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
client side
CVE-2023-31889
template injection
CVE-2024-4304
CVE-2006-4304
CVE-2024-33272
type confusion
CVE-2024-21345
CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »