Browse CVEs

MEDIUM 6.1 CVE-2025-57543 Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be render… Netbox No fix yet Fix from $1,6002026-03-16 MEDIUM 5.4 CVE-2025-69848 NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting (XSS) vulnerability ex… Netbox after 3.7.8 Fix from $1,6002026-02-03 MEDIUM 6.5 CVE-2024-56915 Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget. Netbox 4.2.2+ Fix from $1,6002025-06-26 HIGH 7.1 CVE-2024-56917 Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode. Netbox after 4.2.1 Fix from $1,9502025-06-24 MEDIUM 6.1 CVE-2024-56916 In Netbox Community 4.1.7, once authenticated, Configuration History > Add`is vulnerable to cross-site scripting (XSS) due to the `current value` fie… Netbox after 4.2.1 Fix from $1,6002025-06-24 MEDIUM 6.1 CVE-2024-56918 In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authenticated attacker to exfiltrat… Netbox after 4.2.1 Fix from $1,6002025-06-24 MEDIUM 5.4 CVE-2024-47226 A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/… Netbox No fix yet Fix from $1,6002024-09-22 MEDIUM 6.1 CVE-2024-40737 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40738 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40739 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40740 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40741 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40742 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40726 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40727 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40728 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40729 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40730 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40731 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40732 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40733 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40734 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40735 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-40736 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-38972 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected … Netbox No fix yet Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-0948 ** DISPUTED ** A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing… Netbox after 3.7.0 Fix from $1,6002024-01-26 MEDIUM 5.4 CVE-2023-36234 Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function. Netbox No fix yet Fix from $1,6002023-09-20 MEDIUM 5.4 CVE-2023-37625 A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in… Netbox No fix yet Fix from $1,6002023-08-10 MEDIUM 5.4 CVE-2023-34565 Netbox 3.5.1 is vulnerable to Cross Site Scripting (XSS) in the "Create Wireless LAN Groups" function. Netbox No fix yet Fix from $1,6002023-06-14 MEDIUM 5.4 CVE-2023-33799 A stored cross-site scripting (XSS) vulnerability in the Create Contacts (/tenancy/contacts/) function of Netbox v3.5.1 allows attackers to execute a… Netbox No fix yet Fix from $1,6002023-05-24