Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
webmin webmin vulnerabilities and exploits
(subscribe to this query)
605
VMScore
CVE-2021-32157
A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.
Webmin Webmin 1.973
1 Github repository
605
VMScore
CVE-2019-15641
xmlrpc.cgi in Webmin up to and including 1.930 allows authenticated XXE attacks. By default, only root, admin, and sysadm can access xmlrpc.cgi.
Webmin Webmin
605
VMScore
CVE-2019-9624
Webmin 1.900 allows remote malicious users to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.
Webmin Webmin 1.900
605
VMScore
CVE-2015-2009
Cross-site request forgery (CSRF) vulnerability in the xmlrpc.cgi service in IBM QRadar SIEM 7.1 before MR2 Patch 11 Interim Fix 02 and 7.2.x prior to 7.2.5 Patch 4 allows remote malicious users to hijack the authentication of arbitrary users for requests that insert XSS sequence...
Ibm Qradar Security Information And Event Manager 7.2.5
Ibm Qradar Security Information And Event Manager 7.1.0
Ibm Qradar Security Information And Event Manager
605
VMScore
CVE-2014-3883
Usermin prior to 1.600 allows remote malicious users to execute arbitrary operating-system commands via unspecified vectors related to a user action.
Webmin Usermin 1.510
Webmin Usermin 1.500
Webmin Usermin 1.490
Webmin Usermin 1.480
Webmin Usermin 1.470
Webmin Usermin 1.340
Webmin Usermin 1.330
Webmin Usermin 1.320
Webmin Usermin 1.310
Webmin Usermin 1.170
Webmin Usermin 1.160
Webmin Usermin 1.150
Webmin Usermin 1.140
Webmin Usermin 1.010
Webmin Usermin 1.000
Webmin Usermin 0.990
Webmin Usermin 0.980
Webmin Usermin 0.4
Webmin Usermin
Webmin Usermin 1.580
Webmin Usermin 1.570
Webmin Usermin 1.560
605
VMScore
CVE-2012-4893
Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and previous versions allow remote malicious users to hijack the authentication of privileged users for requests that (1) read files or execute (2) tar, (3) zip, or (4) gzip commands, a di...
Gentoo Webmin 1.500
Gentoo Webmin 1.480
Gentoo Webmin 1.470
Gentoo Webmin 1.450
Gentoo Webmin 1.290
Gentoo Webmin 1.280
Gentoo Webmin 1.270
Gentoo Webmin 1.260
Gentoo Webmin 1.560
Gentoo Webmin 1.520
Gentoo Webmin 1.430
Gentoo Webmin 1.410
Gentoo Webmin 1.320
Gentoo Webmin 1.300
Gentoo Webmin 1.240
Gentoo Webmin 1.220
Gentoo Webmin 1.140
Gentoo Webmin
Gentoo Webmin 1.580
Gentoo Webmin 1.570
Gentoo Webmin 1.550
Gentoo Webmin 1.390
605
VMScore
CVE-2006-4542
Webmin prior to 1.296 and Usermin prior to 1.226 do not properly handle a URL with a null ("%00") character, which allows remote malicious users to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs.
Usermin Usermin 0.7
Usermin Usermin 0.4
Usermin Usermin 0.92
Usermin Usermin 0.93
Usermin Usermin 0.94
Usermin Usermin 1.010
Usermin Usermin 1.020
Usermin Usermin 1.090
Usermin Usermin 1.100
Webmin Webmin 0.1
Webmin Webmin 0.2
Webmin Webmin 0.21
Webmin Webmin 0.5
Webmin Webmin 0.51
Webmin Webmin 0.80
Webmin Webmin 0.83
Webmin Webmin 0.93
Webmin Webmin 0.94
Webmin Webmin 1.0.10
Webmin Webmin 1.0.20
Webmin Webmin 1.0.80
Webmin Webmin 1.0.90
578
VMScore
CVE-2022-30708
Webmin up to and including 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created (i.e., not created in Virtualmin or Cloudmin). This occurs because settings-editor_write.cgi does not properly restrict the file parameter.
Webmin Webmin
578
VMScore
CVE-2019-15642
rpc.cgi in Webmin up to and including 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states "RPC can be used to run any command or modify any file on a s...
Webmin Webmin
1 Github repository
570
VMScore
CVE-2002-1947
Webmin 0.21 up to and including 1.0 uses the same built-in SSL key for all installations, which allows remote malicious users to eavesdrop or highjack the SSL session.
Webmin Webmin 0.79
Webmin Webmin 0.80
Webmin Webmin 0.85
Webmin Webmin 0.88
Webmin Webmin 0.22
Webmin Webmin 0.31
Webmin Webmin 0.41
Webmin Webmin 0.42
Webmin Webmin 0.95
Webmin Webmin 0.96
Webmin Webmin 0.97
Webmin Webmin 0.98
Webmin Webmin 0.99
Webmin Webmin 0.76
Webmin Webmin 0.78
Webmin Webmin 0.91
Webmin Webmin 0.93
Webmin Webmin 1.0.00
Webmin Webmin 0.21
Webmin Webmin 0.51
Webmin Webmin 0.77
Webmin Webmin 0.92
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380
CVE-2024-1694
local file inclusion
CVE-2024-5645
CVE-2024-24919
XSS
CVE-2024-36774
CVE-2024-21306
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »