virtualmin kayıtları
virtualmin üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2024-45692İstismar yok | Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.virtualmin · virtualmin · CWE-835 | Yüksek7,5 | — | %0,6 | 4 Eyl 2024 |
24İzleyin | CVE-2018-18208İstismar yok | Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.virtualmin · virtualmin · CWE-79 | Orta6,1 | — | %0,7 | 10 Eki 2018 |
24İzleyin | CVE-2018-18207İstismar yok | Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.virtualmin · virtualmin · CWE-74 | Orta6,1 | — | %0,7 | 10 Eki 2018 |
21İzleyin | CVE-2023-47095İstismar yok | A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 avirtualmin · virtualmin · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-47099İstismar yok | A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitraryvirtualmin · virtualmin · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-47094İstismar yok | A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to ivirtualmin · virtualmin · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-47096İstismar yok | A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote atvirtualmin · virtualmin · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-47097İstismar yok | A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to ivirtualmin · virtualmin · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
19İzleyin | CVE-2023-47098İstismar yok | A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote atvirtualmin · virtualmin · CWE-79 | Orta4,8 | — | %0,5 | 31 Eki 2023 |
- CVE-2024-4569230İzleyin
Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.
YüksekCVSS 7,5İstismar yokEPSS %1virtualmin · virtualmin4 Eyl 2024
- CVE-2018-1820824İzleyin
Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.
OrtaCVSS 6,1İstismar yokEPSS %1virtualmin · virtualmin10 Eki 2018
- CVE-2018-1820724İzleyin
Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.
OrtaCVSS 6,1İstismar yokEPSS %1virtualmin · virtualmin10 Eki 2018
- CVE-2023-4709521İzleyin
A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 a
OrtaCVSS 5,4İstismar yokEPSS %0virtualmin · virtualmin31 Eki 2023
- CVE-2023-4709921İzleyin
A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary
OrtaCVSS 5,4İstismar yokEPSS %0virtualmin · virtualmin31 Eki 2023
- CVE-2023-4709421İzleyin
A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to i
OrtaCVSS 5,4İstismar yokEPSS %0virtualmin · virtualmin31 Eki 2023
- CVE-2023-4709621İzleyin
A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote at
OrtaCVSS 5,4İstismar yokEPSS %0virtualmin · virtualmin31 Eki 2023
- CVE-2023-4709721İzleyin
A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to i
OrtaCVSS 5,4İstismar yokEPSS %0virtualmin · virtualmin31 Eki 2023
- CVE-2023-4709819İzleyin
A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote at
OrtaCVSS 4,8İstismar yokEPSS %0virtualmin · virtualmin31 Eki 2023