Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 106
Restablecer filtrosLibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig page
LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users
LibreNMS Vulnerable to Remote Code Execution via AboutController
LibreNMS Vulnerable to Remote Code Execution by Signal Alert Transportation module
LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment
LibreNMS: Cross-Site Scripting in ShowConfigController
LibreNMS is Vulnerable to Remote Code Execution by Arbitrary File Write
LibreNMS has a Time-Based Blind SQL Injection in address-search.inc.php
LibreNMS has a Stored XSS in Alert Rule
LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream.
LibreNMS has a Stored XSS in Custom OID - unit parameter missing strip_tags()
LibreNMS /port-groups name Stored Cross-Site Scripting
LibreNMS /device-groups name Stored Cross-Site Scripting
LibreNMS affected by reflected xss via email field
LibreNMS contains an authenticated SQL Injection vulnerability
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
LibreNMS has Weak Password Policy
LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`
LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
LibreNMS has a Stored XSS vulnerability in its Alert Transport name field
LibreNMS is vulnerable to Reflected-XSS in `report_this` function
LibreNMS allows stored XSS in Alert Template name field
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.