librenms/librenms vulnerabilities

Latest librenms/librenms CVEs

Newest publication first

1. CVE-2023-5591 SQL Injection in librenms/librenms

   Published 2023-10-16

   Medium·CVSS 6.5 EPSS 23.8%

   SQL Injection in GitHub repository librenms/librenms prior to 23.10.0.

2. CVE-2023-5060 Cross-site Scripting (XSS) - DOM in librenms/librenms

   Published 2023-09-19

   Medium·CVSS 6.1 EPSS 0.64%

   Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.1.

3. CVE-2023-4982 Cross-site Scripting (XSS) - Stored in librenms/librenms

   Published 2023-09-15

   Medium·CVSS 5.4 EPSS 0.66%

   Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 23.9.0.

4. CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms

   Published 2023-09-15

   Medium·CVSS 5.4 EPSS 0.69%

   Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 23.9.0.

5. CVE-2023-4981 Cross-site Scripting (XSS) - DOM in librenms/librenms

   Published 2023-09-15

   Medium·CVSS 5.4 EPSS 0.66%

   Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0.

6. CVE-2023-4978 Cross-site Scripting (XSS) - DOM in librenms/librenms

   Published 2023-09-15

   Medium·CVSS 6.1 EPSS 0.67%

   Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0.

7. CVE-2023-4979 Cross-site Scripting (XSS) - Reflected in librenms/librenms

   Published 2023-09-15

   Medium·CVSS 5.4 EPSS 0.69%

   Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.9.0.

8. CVE-2023-4977 Code Injection in librenms/librenms

   Published 2023-09-15

   Medium·CVSS 5.4 EPSS 0.53%

   Code Injection in GitHub repository librenms/librenms prior to 23.9.0.

9. CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms

   Published 2023-08-15

   Medium·CVSS 5.4 EPSS 69.7%

   Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0.

10. CVE-2022-4070 Insufficient Session Expiration in librenms/librenms

    Published 2022-11-20

    Critical·CVSS 9.8 EPSS 0.66%

    Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.

11. CVE-2022-3516 Cross-site Scripting (XSS) - Stored in librenms/librenms

    Published 2022-11-20

    Medium·CVSS 6.1 EPSS 0.50%

    Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

12. CVE-2022-4067 Cross-site Scripting (XSS) - Stored in librenms/librenms

    Published 2022-11-20

    Medium·CVSS 5.4 EPSS 93.7%

    Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

13. CVE-2022-4069 Cross-site Scripting (XSS) - Generic in librenms/librenms

    Published 2022-11-20

    Medium·CVSS 4.8 EPSS 93.3%

    Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.

14. CVE-2022-4068 Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms

    Published 2022-11-20

    Medium·CVSS 5.4 EPSS 37.5%

    A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to exec...

15. CVE-2022-3525 Deserialization of Untrusted Data in librenms/librenms

    Published 2022-11-20

    High·CVSS 8.8 EPSS 0.95%

    Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.

16. CVE-2022-3562 Cross-site Scripting (XSS) - Stored in librenms/librenms

    Published 2022-11-20

    Medium·CVSS 5.4 EPSS 94.2%

    Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.

17. CVE-2022-3561 Cross-site Scripting (XSS) - Generic in librenms/librenms

    Published 2022-11-20

    Medium·CVSS 6.1 EPSS 0.58%

    Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.

18. CVE-2022-3231 Cross-site Scripting (XSS) - Stored in librenms/librenms

    Published 2022-09-17

    Medium·CVSS 5.4 EPSS 0.72%

    Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.

19. CVE-2022-0772 Cross-site Scripting (XSS) - Stored in librenms/librenms

    Published 2022-02-27

    Medium·CVSS 4.8 EPSS 0.62%

    Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2.

20. CVE-2022-0589 Cross-site Scripting (XSS) - Stored in librenms/librenms

    Published 2022-02-15

    Medium·CVSS 5.4 EPSS 0.85%

    Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0.

21. CVE-2022-0588 Missing Authorization in librenms/librenms

    Published 2022-02-15

    Medium·CVSS 6.5 EPSS 1.1%

    Missing Authorization in Packagist librenms/librenms prior to 22.2.0.

22. CVE-2022-0587 Improper Authorization in librenms/librenms

    Published 2022-02-15

    Medium·CVSS 6.5 EPSS 1.0%

    Improper Authorization in Packagist librenms/librenms prior to 22.2.0.

23. CVE-2022-0580 Incorrect Authorization in librenms/librenms

    Published 2022-02-14

    High·CVSS 8.8 EPSS 1.2%

    Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.

24. CVE-2022-0575 Cross-site Scripting (XSS) - Stored in librenms/librenms

    Published 2022-02-13

    Medium·CVSS 5.4 EPSS 0.85%

    Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.

25. CVE-2022-0576 Cross-site Scripting (XSS) - Generic in librenms/librenms

    Published 2022-02-13

    Medium·CVSS 6.1 EPSS 1.00%

    Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.