Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
128 results · page 3 of 3
Feb 15, 2022Missing Authorization in Packagist librenms/librenms prior to 22.2.0.CVE-2022-0588 · Other software · librenms · reported by security@huntr.devHigh 7.1
Missing Authorization in Packagist librenms/librenms prior to 22.2.0.
- Product
- librenms/librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2022Improper Authorization in Packagist librenms/librenms prior to 22.2.0.CVE-2022-0587 · Other software · librenms · reported by security@huntr.devMedium 6.5
Improper Authorization in Packagist librenms/librenms prior to 22.2.0.
- Product
- librenms/librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 14, 2022Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.CVE-2022-0580 · Other software · librenms · reported by security@huntr.devHigh 7.1
Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.
- Product
- librenms/librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 14, 2022Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.CVE-2022-0576 · Other software · librenms · reported by security@huntr.devMedium 6.1
Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.
- Product
- librenms/librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 14, 2022Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.CVE-2022-0575 · Other software · librenms · reported by security@huntr.devMedium 5.4
Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.
- Product
- librenms/librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2021Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.CVE-2021-44278 · Other software · Librenms · reported by MITRECritical 9.8
Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 1, 2021Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php.CVE-2021-44279 · Other software · Librenms · reported by MITREMedium 6.1
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 1, 2021Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php.CVE-2021-44277 · Other software · Librenms · reported by MITREMedium 6.1
Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 3, 2021LibreNMS through 21.10.2 allows XSS via a widget title.CVE-2021-43324 · Other software · Librenms · reported by MITREMedium 6.1
LibreNMS through 21.10.2 allows XSS via a widget title.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 2021In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api->description variable.CVE-2021-31274 · Other software · Librenms · reported by MITREMedium 5.4
In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api->description variable. As a result, arbitrary Javascript code can get executed.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcommunity.librenms.orggithub.com
Feb 8, 2021A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticaCVE-2020-35700 · Other software · Librenms · reported by MITREHigh 8.8
A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form/widget-settings endpoint.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 21, 2020An issue was discovered in LibreNMS before 1.65.1.CVE-2020-15877 · Other software · Librenms · reported by MITREHigh 8.8
An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' => 'admin'" instead of "'middleware' => ['can:admin']" in routes/web.php.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcommunity.librenms.orggithub.com
Jul 21, 2020In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.CVE-2020-15873 · Other software · Librenms · reported by MITREMedium 6.5
In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcommunity.librenms.orggithub.com
Sep 9, 2019An issue was discovered in LibreNMS 1.50.1.CVE-2019-12465 · Other software · Librenms · reported by MITREHigh 8.1
An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajax_rulesuggest.php file where the term parameter is used insecurely in a database query for showing columns of a table, as demonstrated by an ajax_rulesuggest.php?debug=1&term= request.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddarkmatter.aedarkmatter.ae
Sep 9, 2019An issue was discovered in LibreNMS 1.50.1.CVE-2019-12464 · Other software · Librenms · reported by MITREHigh 7.5
An issue was discovered in LibreNMS 1.50.1. An authenticated user can perform a directory traversal attack against the /pdf.php file with a partial filename in the report parameter, to cause local file inclusion resulting in code execution.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddarkmatter.aedarkmatter.ae
Sep 9, 2019An issue was discovered in LibreNMS 1.50.1.CVE-2019-12463 · Other software · Librenms · reported by MITREHigh 8.8
An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options (includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with mysqli_real_escape_string, which is only useful for preventing SQL injection attacks; other parameters are unfiltered. This allows an attacker to inject RRDtool syntax with newline characters via the html/graph.php and html/graph-realtime.php scripts. RRDtool syntax is quite versatile and an attacker could leverage this to perform a number of attacks, including disclosing directory structure and filenames, disclosing file content, denial of service, or writing arbitrary files. NOTE: relative to CVE-2019-10665, this requires authentication and the pathnames differ.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddarkmatter.aedarkmatter.ae
Sep 9, 2019An issue was discovered in LibreNMS through 1.47.CVE-2019-10671 · Other software · Librenms · reported by MITREHigh 8.8
An issue was discovered in LibreNMS through 1.47. It does not parameterize all user supplied input within database queries, resulting in SQL injection. An authenticated attacker can subvert these database queries to extract or manipulate data, as demonstrated by the graph.php sort parameter.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddarkmatter.aedarkmatter.ae
Sep 9, 2019An issue was discovered in LibreNMS through 1.47.CVE-2019-10670 · Other software · Librenms · reported by MITREMedium 6.1
An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqli_escape_real_string for filtering data. However, this is particularly ineffective when returning user supplied input in an HTML or a JavaScript context, resulting in unsafe data being injected into these contexts, leading to attacker controlled JavaScript executing in the browser. One example of this is the string parameter in html/pages/inventory.inc.php.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddarkmatter.aedarkmatter.ae
Sep 9, 2019An issue was discovered in LibreNMS through 1.47.CVE-2019-10669 · Other software · Librenms · reported by MITREHigh 7.2
An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function. This function is not the appropriate function to sanitize command arguments as it does not escape a number of command line syntax characters such as ` (backtick), allowing an attacker to inject commands into the variable $rrd_cmd, which gets executed via passthru().
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comdarkmatter.ae
Sep 9, 2019An issue was discovered in LibreNMS through 1.47.CVE-2019-10668 · Other software · Librenms · reported by MITRECritical 9.1
An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and are not expected to be publicly accessible.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddarkmatter.aedarkmatter.ae
Sep 9, 2019An issue was discovered in LibreNMS through 1.47.CVE-2019-10667 · Other software · Librenms · reported by MITREMedium 5.3
An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddarkmatter.aedarkmatter.ae
Sep 9, 2019An issue was discovered in LibreNMS through 1.47.CVE-2019-10666 · Other software · Librenms · reported by MITREHigh 8.1
An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the include() function on user supplied input without sanitizing the values by calling basename() or a similar function. An attacker can leverage this to execute PHP code from the included file. Exploitation of these scripts is made difficult by additional text being appended (typically .inc.php), which means an attacker would need to be able to control both a filename and its content on the server. However, exploitation can be achieved as demonstrated by the csv.php?report=../ substring.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddarkmatter.aedarkmatter.ae
Sep 9, 2019An issue was discovered in LibreNMS through 1.47.CVE-2019-10665 · Other software · Librenms · reported by MITRECritical 9.8
An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options (html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with mysqli_real_escape_string, which is only useful for preventing SQL injection attacks; other parameters are unfiltered. This allows an attacker to inject RRDtool syntax with newline characters via the html/graph.php script. RRDtool syntax is quite versatile and an attacker could leverage this to perform a number of attacks, including disclosing directory structure and filenames, file content, denial of service, or writing arbitrary files.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddarkmatter.aedarkmatter.ae
Aug 28, 2019LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin consolCVE-2019-15230 · Other software · Librenms · reported by MITREMedium 5.4
LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsevenlayers.comsevenlayers.com
Apr 24, 2019LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation CVE-2018-20434 · Other software · Librenms · reported by MITRECritical 9.8
LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.compacketstormsecurity.com
Mar 28, 2019LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search.CVE-2018-20678 · Other software · Librenms · reported by MITREHigh 8.8
LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.enea.plgithub.com
Oct 18, 2018Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameCVE-2018-18478 · Other software · Librenms · reported by MITREMedium 6.1
Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameter in the /ajax_form.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and html/includes/forms/edit-dashboard.inc.php.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 9, 2017The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.CVE-2017-16759 · Other software · Librenms · reported by MITREMedium 5.9
The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.
- Product
- Librenms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.librenms.orggithub.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.