virtualmin records

9 published records for vendor virtualmin.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2024-45692No exploit	Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.virtualmin · virtualmin · CWE-835 Pre-auth Denial of service	High7.5	—	0.6%	Sep 4, 2024
24Monitor	CVE-2018-18208No exploit	Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.virtualmin · virtualmin · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Oct 10, 2018
24Monitor	CVE-2018-18207No exploit	Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.virtualmin · virtualmin · CWE-74 Pre-auth	Medium6.1	—	0.7%	Oct 10, 2018
21Monitor	CVE-2023-47095No exploit	A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 avirtualmin · virtualmin · CWE-79 XSS	Medium5.4	—	0.4%	Oct 31, 2023
21Monitor	CVE-2023-47099No exploit	A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitraryvirtualmin · virtualmin · CWE-79 XSS	Medium5.4	—	0.4%	Oct 31, 2023
21Monitor	CVE-2023-47094No exploit	A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to ivirtualmin · virtualmin · CWE-79 XSS	Medium5.4	—	0.4%	Oct 31, 2023
21Monitor	CVE-2023-47096No exploit	A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote atvirtualmin · virtualmin · CWE-79 XSS	Medium5.4	—	0.4%	Oct 31, 2023
21Monitor	CVE-2023-47097No exploit	A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to ivirtualmin · virtualmin · CWE-79 XSS	Medium5.4	—	0.4%	Oct 31, 2023
19Monitor	CVE-2023-47098No exploit	A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote atvirtualmin · virtualmin · CWE-79 XSS	Medium4.8	—	0.5%	Oct 31, 2023

CVE-2024-45692
30Monitor
Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
virtualmin · virtualminSep 4, 2024
CVE-2018-18208
24Monitor
Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
virtualmin · virtualminOct 10, 2018
CVE-2018-18207
24Monitor
Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
virtualmin · virtualminOct 10, 2018
CVE-2023-47095
21Monitor
A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 a
MediumCVSS 5.4No exploitEPSS 0%
- XSS
virtualmin · virtualminOct 31, 2023
CVE-2023-47099
21Monitor
A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary
MediumCVSS 5.4No exploitEPSS 0%
- XSS
virtualmin · virtualminOct 31, 2023
CVE-2023-47094
21Monitor
A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to i
MediumCVSS 5.4No exploitEPSS 0%
- XSS
virtualmin · virtualminOct 31, 2023
CVE-2023-47096
21Monitor
A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote at
MediumCVSS 5.4No exploitEPSS 0%
- XSS
virtualmin · virtualminOct 31, 2023
CVE-2023-47097
21Monitor
A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to i
MediumCVSS 5.4No exploitEPSS 0%
- XSS
virtualmin · virtualminOct 31, 2023
CVE-2023-47098
19Monitor
A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote at
MediumCVSS 4.8No exploitEPSS 0%
- XSS
virtualmin · virtualminOct 31, 2023