Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 21:05:41 +0000 EUVD-2026-274358 https://cve.radiocsirt.org/vuln/euvd-2026-274358 EUVD-2026-274358 https://cve.radiocsirt.org/vuln/euvd-2026-274358 fkie_cve-2020-36947 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36947 <p>LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the &#39;sort&#39; parameter with crafted SQL injection techniques to retrieve sensitive database contents through time-based blind SQL injection.</p> <p>LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the &#39;sort&#39; parameter with crafted SQL injection techniques to retrieve sensitive database contents through time-based blind SQL injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-36947 GHSA-qp2j-v5jg-hg68 — LibreNMS contains an authenticated SQL Injection vulnerability https://cve.radiocsirt.org/vuln/ghsa-qp2j-v5jg-hg68 <p><strong>Affected:</strong> Packagist: librenms/librenms</p> <p>LibreNMS 1.46 contains an authenticated SQL Injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the &#39;sort&#39; parameter with crafted SQL Injection techniques to retrieve sensitive database contents through time-based blind SQL Injection.</p> <p><strong>Affected:</strong> Packagist: librenms/librenms</p> <p>LibreNMS 1.46 contains an authenticated SQL Injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the &#39;sort&#39; parameter with crafted SQL Injection techniques to retrieve sensitive database contents through time-based blind SQL Injection.</p> https://cve.radiocsirt.org/vuln/ghsa-qp2j-v5jg-hg68