repository icon
librenms / librenms Project repository

Community-based GPL-licensed network monitoring system

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN46 DAYS

FIX

WITHIN76 DAYS

Time-Based Blind SQL injection leads to database extraction
nishaaaap
High
•CVE-2023-5591
Rate limit Bypass on login page
sospiro014
informative
Medium
Dom XSS in module "Search IPv6"
trunggg02
High
•CVE-2023-5060
Cookie without Secure flag
nyeooo
not applicable
DOM XSS at index FBD Table
hainguyen0207
Critical
•CVE-2023-4982
Dom XSS in module "Search IPv4"
trunggg02
Critical
•CVE-2023-4978
DOM XSS in https://demo.librenms.org/ports
hainguyen0207
High
•CVE-2023-4980
DOM XSS in https://demo.librenms.org/eventlog
hainguyen0207
High
•CVE-2023-4981
HTML Injection
hainguyen0207
High
•CVE-2023-4977
DOM XSS in https://demo.librenms.org/outages
hainguyen0207
High
•CVE-2023-4979
Stored xss has been found in /addhost
aymenborgi1
not applicable
Reflected XSS
mike993
High
•CVE-2023-4347
SNMP location XSS vulnerability
zluudg
Medium
Stored XSS on Notifications
seifallahhomrani1
self closed
HTML injection possible via LLDP
zluudg
High
Stored XSS on Dashboard
mike993
self closed
Unauthenticated, Stored XSS to RCE via SNMP Trap
stefan-schiller-sonarsource
High
Stored Cross-Site Scripting (XSS)
vautia
Medium
Deserialization of arbitrary data leads to RCE
hordalex
Critical
•CVE-2022-3525
Stored XSS in Notifications
filipkania
Medium
•CVE-2022-3516
Mass Assignment leads to Stored XSS
vautia
High
•CVE-2022-4068
Insufficient Session Expiration
vautia
Low
•CVE-2022-4070
Stored Cross-Site Scripting (XSS)
vautia
Low
•CVE-2022-4069
Stored Cross-Site Scripting (XSS)
vautia
Low
•CVE-2022-4067
Stored Cross-Site Scripting (XSS) on Schedule Maintenance "Title" parameter
saitamang
Medium
•CVE-2022-3231
librenms alert-rules Stored XSS
dnr6419
Medium
•CVE-2022-3561
librenms bills Description & Notes Stored XSS
dnr6419
Medium
•CVE-2022-3562
Cross-site Scripting (XSS) - Stored
ribersec
Medium
•CVE-2022-0772
Cross-site Scripting (XSS) - Stored
faisalfs10x
Medium
•$15•CVE-2022-0589
Improper Authorization
faisalfs10x
High
•$30•CVE-2022-0587
Exposure of Sensitive Information to an Unauthorized Actor
faisalfs10x
High
•$30•CVE-2022-0588
Improper Access Control
faisalfs10x
High
•$36•CVE-2022-0580
Cross-site Scripting (XSS) - Generic
faisalfs10x
Medium
•$15•CVE-2022-0576
Cross-site Scripting (XSS) - Stored
faisalfs10x
Medium
•$15•CVE-2022-0575