Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 620
Reset filtersLibrenms has a reflected XSS on error alert
LibreNMS Misc Section Stored Cross-site Scripting vulnerability
LibreNMS Ports Stored Cross-site Scripting vulnerability
LibreNMS Display Name Stored Cross-site Scripting vulnerability
LibreNMS Display Name 2 Stored Cross-site Scripting vulnerability
Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message
Silverstripe Framework has a XSS via insert media remote file oembed
REDAXO CMS Cross-site Scripting vulnerability
Grav Cross-site Scripting vulnerability
Extension:TabberNeue vulnerable to Cross-site Scripting
PhpSpreadsheet allows bypass XSS sanitizer using the javascript protocol and special characters
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability of the hyperlink base in the HTML page header
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability in custom properties
LGSL has a reflected XSS at /lgsl_files/lgsl_list.php
lgsl Stored Cross-Site Scripting vulnerability
LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings section
XXE in PHPSpreadsheet's XLSX reader
XmlScanner bypass leads to XXE
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php
LibreNMS has an Authenticated OS Command Injection
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php
LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.