Known vulnerabilities in LibreNMS - page 4

Vendor: LibreNMS Project
Software: LibreNMS
Software CPE: cpe:2.3:a:librenms_project:librenms:*:*:*:*:*:*:*:*
Website: https://github.com/librenms
Total vulnerabilities: 71
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting LibreNMS LibreNMS is affected by 71 known vulnerabilities: 4 high, 12 medium, 55 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129749 - Information Exposure Through an Error Message
CVE-2023-48294		 CWE-209 Low
No
No
 23.11.0 17.11.2023 SB2023111779
#VU129747 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-48295		 CWE-79 Low
No
No
 23.11.0 17.11.2023 SB2023111779
#VU80958 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-5060		 CWE-79 Low
No
No
 23.9.1 21.09.2023 SB2023092126
#VU32720 - Improper Access Control
CVE-2020-15877		 CWE-284 Medium
No
No
 1.65.1 28.07.2020 SB2020072808
#VU32706 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-15873		 CWE-89 Medium
Available
No
 1.65.1 28.07.2020 SB2020072808
#VU35525 - Improper input validation
CVE-2019-12463		 CWE-20 High
No
No
 1.53 09.09.2019 SB2019090926
#VU35526 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-12464		 CWE-22 Medium
No
No
 - 09.09.2019 SB2019090927
#VU35527 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12465		 CWE-89 High
No
No
 1.53 09.09.2019 SB2019090926
#VU35590 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15230		 CWE-79 Low
No
No
 - 28.08.2019 SB2019082829
#VU35953 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-20434		 CWE-78 High
Available
No
 - 24.04.2019 SB2019042418
#VU36488 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-18478		 CWE-79 Low
No
No
 1.44 18.10.2018 SB2018101820


Showing elements 61 - 80 out of 71