İçeriğe atla
Noroxi

librenms kayıtları

librenms üreticisine ait 106 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %2,8
Pre-auth RCE
3
Düzeltme kaydı olan
%90,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

106 kayıt
  • CVE-2018-20434
    60Bu hafta

    LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.

    KritikCVSS 9,8SilahlaştırılmışEPSS %71

    librenms · librenms24 Nis 2019

  • CVE-2019-10669
    52Planlayın

    An issue was discovered in LibreNMS through 1.47.

    YüksekCVSS 7,2SilahlaştırılmışEPSS %81

    librenms · librenms9 Eyl 2019

  • CVE-2022-3562
    49Planlayın

    Cross-site Scripting (XSS) - Stored in librenms/librenms

    OrtaCVSS 5,4İstismar yokEPSS %94

    librenms · librenms20 Kas 2022

  • CVE-2022-4067
    49Planlayın

    Cross-site Scripting (XSS) - Stored in librenms/librenms

    OrtaCVSS 5,4İstismar yokEPSS %94

    librenms · librenms20 Kas 2022

  • CVE-2022-4069
    47Planlayın

    Cross-site Scripting (XSS) - Generic in librenms/librenms

    OrtaCVSS 4,8İstismar yokEPSS %93

    librenms · librenms20 Kas 2022

  • CVE-2024-49754
    43Planlayın

    LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php

    OrtaCVSS 5,4İstismar yokEPSS %72

    librenms · librenms15 Kas 2024

  • CVE-2023-4347
    42Planlayın

    Cross-site Scripting (XSS) - Reflected in librenms/librenms

    OrtaCVSS 5,4İstismar yokEPSS %70

    librenms · librenms14 Ağu 2023

  • CVE-2024-32461
    41Planlayın

    LibreNMS vulnerable to time-based SQL injection that leads to database extraction

    YüksekCVSS 8,8İstismar yokEPSS %19

    librenms · librenms22 Nis 2024

  • CVE-2022-29712
    40Planlayın

    LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parame

    KritikCVSS 9,8İstismar yokEPSS %2

    librenms · librenms2 Haz 2022

  • CVE-2021-44278
    39İzleyin

    Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    librenms · librenms3 Ara 2021

  • CVE-2019-10665
    39İzleyin

    An issue was discovered in LibreNMS through 1.47.

    KritikCVSS 9,8İstismar yokEPSS %1

    librenms · librenms9 Eyl 2019

  • CVE-2022-4070
    39İzleyin

    Insufficient Session Expiration in librenms/librenms

    KritikCVSS 9,8İstismar yokEPSS %1

    librenms · librenms20 Kas 2022

  • CVE-2024-51092
    38İzleyin

    LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(),

    KritikCVSS 9,1SilahlaştırılmışEPSS %7

    librenms · librenms8 May 2026

  • CVE-2026-86426
    37İzleyin

    LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

    KritikCVSS 9,2Kavram kanıtıEPSS %4

    librenms · librenms7 Eyl 2026

  • CVE-2026-26988
    37İzleyin

    LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    librenms · librenms19 Şub 2026

  • CVE-2020-35700
    36İzleyin

    A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allo

    YüksekCVSS 8,8İstismar yokEPSS %2

    librenms · librenms8 Şub 2021

  • CVE-2020-15877
    36İzleyin

    An issue was discovered in LibreNMS before 1.65.1.

    YüksekCVSS 8,8İstismar yokEPSS %2

    librenms · librenms21 Tem 2020

  • CVE-2019-10668
    36İzleyin

    An issue was discovered in LibreNMS through 1.47.

    KritikCVSS 9,1İstismar yokEPSS %2

    librenms · librenms9 Eyl 2019

  • CVE-2019-12463
    35İzleyin

    An issue was discovered in LibreNMS 1.50.1.

    YüksekCVSS 8,8İstismar yokEPSS %1

    librenms · librenms9 Eyl 2019

  • CVE-2018-20678
    35İzleyin

    LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a

    YüksekCVSS 8,8İstismar yokEPSS %1

    librenms · librenms28 Mar 2019

  • CVE-2019-10671
    35İzleyin

    An issue was discovered in LibreNMS through 1.47.

    YüksekCVSS 8,8İstismar yokEPSS %1

    librenms · librenms9 Eyl 2019

  • CVE-2022-0580
    35İzleyin

    Incorrect Authorization in librenms/librenms

    YüksekCVSS 8,8İstismar yokEPSS %1

    librenms · librenms14 Şub 2022

  • CVE-2022-3525
    35İzleyin

    Deserialization of Untrusted Data in librenms/librenms

    YüksekCVSS 8,8İstismar yokEPSS %1

    librenms · librenms20 Kas 2022

  • CVE-2026-26990
    35İzleyin

    LibreNMS has Time-Based Blind SQL Injection in address-search.inc.php

    YüksekCVSS 8,8İstismar yokEPSS %1

    librenms · librenms19 Şub 2026

  • CVE-2024-53457
    34İzleyin

    A stored cross-site scripting (XSS) vulnerability in the Device Settings section of LibreNMS v24.9.0 to v24.10.0 allows attackers to execute

    OrtaCVSS 5,4İstismar yokEPSS %45

    librenms · librenms5 Ara 2024