LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0

LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php

An issue was discovered in LibreNMS through 1.47

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device,…

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and…

LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream

An issue was discovered in LibreNMS through 1.47

LibreNMS before 26.8.0 Argument Injection via graph_title

LibreNMS has Time-Based Blind SQL Injection in address-search.inc.php

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system

Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0

A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to…

An issue was discovered in LibreNMS before 1.65.1

An issue was discovered in LibreNMS 1.50.1

An issue was discovered in LibreNMS through 1.47

LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search

LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname

LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS Virtualisation Discovery Module RCE

LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header

LibreNMS before 26.7.0 Stored XSS via Oxidized API

An issue was discovered in LibreNMS 1.50.1

An issue was discovered in LibreNMS through 1.47

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems

An issue was discovered in LibreNMS 1.50.1

LibreNMS before 26.5.0 Remote Code Execution via AboutController

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system

An issue was discovered in LibreNMS through 1.47

LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php

LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data

LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection

SQL Injection in GitHub repository librenms/librenms prior to 23.10.0

Missing Authorization in Packagist librenms/librenms prior to 22.2.0

Improper Authorization in Packagist librenms/librenms prior to 22.2.0

In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php

LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node List

LibreNMS before 26.9.0 Stored XSS via wireless sensor description

LibreNMS before 26.5.0 Stored XSS via SNMP VRF fields

LibreNMS affected by reflected XSS via email field

LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`

LibreNMS vulnerable to Reflected-XSS in `report_this` function

LibreNMS is PHP/MySQL/SNMP based network monitoring software

librenms is a community-based GPL-licensed network monitoring system

Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.1

Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0