Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Virtualmin HIGH 7.5
CVE-2024-45692

Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.

Fix: 2.202 / 7.20.2+
Fix from $1,950 2024-09-04
Virtualmin MEDIUM 5.4
CVE-2023-47094

A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arb…

No fix yet
Fix from $1,600 2023-11-01
Virtualmin MEDIUM 5.4
CVE-2023-47095

A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows rem…

No fix yet
Fix from $1,600 2023-11-01
Virtualmin MEDIUM 5.4
CVE-2023-47096

A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers t…

No fix yet
Fix from $1,600 2023-11-01
Virtualmin MEDIUM 5.4
CVE-2023-47097

A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to inject arb…

No fix yet
Fix from $1,600 2023-11-01
Virtualmin MEDIUM 5.4
CVE-2023-47099

A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web scri…

No fix yet
Fix from $1,600 2023-11-01
Virtualmin MEDIUM 6.1
CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.

No fix yet
Fix from $1,600 2018-10-10
Virtualmin MEDIUM 6.1
CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.

No fix yet
Fix from $1,600 2018-10-10