Vulnerability index

Browse CVEs

46 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Netbox MEDIUM 6.1
CVE-2025-57543

Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be render…

No fix yet
Fix from $1,600 2026-03-16
Netbox MEDIUM 5.4
CVE-2025-69848

NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting (XSS) vulnerability ex…

Fix: after 3.7.8
Fix from $1,600 2026-02-03
Netbox MEDIUM 6.5
CVE-2024-56915

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.

Fix: 4.2.2+
Fix from $1,600 2025-06-26
Netbox HIGH 7.1
CVE-2024-56917

Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode.

Fix: after 4.2.1
Fix from $1,950 2025-06-24
Netbox MEDIUM 6.1
CVE-2024-56916

In Netbox Community 4.1.7, once authenticated, Configuration History > Add`is vulnerable to cross-site scripting (XSS) due to the `current value` fie…

Fix: after 4.2.1
Fix from $1,600 2025-06-24
Netbox MEDIUM 6.1
CVE-2024-56918

In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authenticated attacker to exfiltrat…

Fix: after 4.2.1
Fix from $1,600 2025-06-24
Netbox MEDIUM 5.4
CVE-2024-47226

A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/…

No fix yet
Fix from $1,600 2024-09-22
Netbox MEDIUM 6.1
CVE-2024-40737

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40738

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40739

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40740

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40741

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40742

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40726

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40727

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40728

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40729

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40730

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40731

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40732

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40733

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40734

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40735

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-40736

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-38972

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected …

No fix yet
Fix from $1,600 2024-07-09
Netbox MEDIUM 6.1
CVE-2024-0948

** DISPUTED ** A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing…

Fix: after 3.7.0
Fix from $1,600 2024-01-26
Netbox MEDIUM 5.4
CVE-2023-36234

Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function.

No fix yet
Fix from $1,600 2023-09-20
Netbox MEDIUM 5.4
CVE-2023-37625

A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in…

No fix yet
Fix from $1,600 2023-08-10
Netbox MEDIUM 5.4
CVE-2023-34565

Netbox 3.5.1 is vulnerable to Cross Site Scripting (XSS) in the "Create Wireless LAN Groups" function.

No fix yet
Fix from $1,600 2023-06-14
Netbox MEDIUM 5.4
CVE-2023-33799

A stored cross-site scripting (XSS) vulnerability in the Create Contacts (/tenancy/contacts/) function of Netbox v3.5.1 allows attackers to execute a…

No fix yet
Fix from $1,600 2023-05-24