Librenms vulnerabilities
95 CVEs and advisories name Librenms as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-47525Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php
- CVE-2024-47526LibreNMS has a Self-XSS ('Cross-site Scripting') in librenms/includes/html/modal/alert_template.inc.php
- CVE-2024-47527LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php
- CVE-2024-47528LibreNMS Contains a Stored XSS via File Upload
- CVE-2024-32480LibreNMS's Time-Based Blind SQL injection leads to database extraction
- CVE-2024-32479LibreNMS's Improper Sanitization on Service template name leads to Stored XSS
- CVE-2024-32461LibreNMS vulnerable to time-based SQL injection that leads to database extraction
- CVE-2023-46745Rate limiting Bypass on login page in libreNMS
- CVE-2023-48294Broken Access control on Graphs Feature in LibreNMS
- CVE-2023-48295Cross-site Scripting at Device groups Deletion feature in LibreNMS
- CVE-2023-5591SQL Injection in librenms/librenms
- CVE-2023-5060Cross-site Scripting (XSS) - DOM in librenms/librenms
- CVE-2023-4982Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2023-4981Cross-site Scripting (XSS) - DOM in librenms/librenms
- CVE-2023-4980Cross-site Scripting (XSS) - Generic in librenms/librenms
- CVE-2023-4978Cross-site Scripting (XSS) - DOM in librenms/librenms
- CVE-2023-4979Cross-site Scripting (XSS) - Reflected in librenms/librenms
- CVE-2023-4977Code Injection in librenms/librenms
- CVE-2023-4347Cross-site Scripting (XSS) - Reflected in librenms/librenms
- CVE-2022-4070Insufficient Session Expiration in librenms/librenms
- CVE-2022-4069Cross-site Scripting (XSS) - Generic in librenms/librenms
- CVE-2022-4068Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms
- CVE-2022-4067Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-3562Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-3561Cross-site Scripting (XSS) - Generic in librenms/librenms
- CVE-2022-3525Deserialization of Untrusted Data in librenms/librenms
- CVE-2022-3516Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-3231Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-0772Cross-site Scripting (XSS) - Stored in librenms/librenms
- CVE-2022-0589Cross-site Scripting (XSS) - Stored in librenms/librenms