Vulnerability index

Browse CVEs

42 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Webmin HIGH 7.1
CVE-2025-61541

Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset link sent to users is construc…

No fix yet
Fix from $1,950 2025-10-16
Usermin MEDIUM 5.3
CVE-2024-44762

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.

No fix yet
Fix from $1,600 2024-10-16
Usermin MEDIUM 5.4
CVE-2023-41157

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the fol…

Mitigation only
Fix from $1,600 2023-09-16
Webmin MEDIUM 6.1
CVE-2023-40983

A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via …

No fix yet
Fix from $1,600 2023-09-15
Webmin MEDIUM 5.4
CVE-2023-40982

A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in…

No fix yet
Fix from $1,600 2023-09-15
Webmin MEDIUM 5.4
CVE-2023-40984

A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via …

No fix yet
Fix from $1,600 2023-09-15
Webmin MEDIUM 5.4
CVE-2023-40985

An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By …

No fix yet
Fix from $1,600 2023-09-15
Webmin MEDIUM 5.4
CVE-2023-40986

A stored cross-site scripting (XSS) vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sr…

No fix yet
Fix from $1,600 2023-09-15
Usermin MEDIUM 5.4
CVE-2023-41156

A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbitrary web…

Mitigation only
Fix from $1,600 2023-09-14
Usermin MEDIUM 5.4
CVE-2023-41159

A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary …

Mitigation only
Fix from $1,600 2023-09-14
Usermin MEDIUM 5.4
CVE-2023-41160

A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web scrip…

No fix yet
Fix from $1,600 2023-09-14
Usermin MEDIUM 6.1
CVE-2023-41162

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script …

Mitigation only
Fix from $1,600 2023-09-13
Usermin MEDIUM 5.4
CVE-2023-41152

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web scri…

Mitigation only
Fix from $1,600 2023-09-13
Usermin MEDIUM 5.4
CVE-2023-41154

A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web scr…

Mitigation only
Fix from $1,600 2023-09-13
Usermin MEDIUM 5.4
CVE-2023-41155

A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to injec…

Mitigation only
Fix from $1,600 2023-09-13
Usermin MEDIUM 5.4
CVE-2023-41158

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web scri…

Mitigation only
Fix from $1,600 2023-09-13
Usermin MEDIUM 5.4
CVE-2023-41161

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key…

Mitigation only
Fix from $1,600 2023-09-07
Webmin MEDIUM 6.1
CVE-2023-41163

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script …

Mitigation only
Fix from $1,600 2023-08-30
Usermin MEDIUM 5.4
CVE-2023-41153

A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web scrip…

Mitigation only
Fix from $1,600 2023-08-29
Webmin MEDIUM 6.1
CVE-2023-38305

An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By prov…

No fix yet
Fix from $1,600 2023-07-31
Webmin MEDIUM 6.1
CVE-2023-38306

An issue was discovered in Webmin 2.021. A Cross-site Scripting (XSS) Bypass vulnerability was discovered in the file upload functionality. Normally,…

No fix yet
Fix from $1,600 2023-07-31
Webmin MEDIUM 6.1
CVE-2023-38308

An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was discovered in the HTTP Tunnel functionality when handling thi…

No fix yet
Fix from $1,600 2023-07-31
Webmin MEDIUM 6.1
CVE-2023-38309

An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the package search functionality. The…

No fix yet
Fix from $1,600 2023-07-31
Webmin MEDIUM 5.4
CVE-2023-38303

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RCE) through…

No fix yet
Fix from $1,600 2023-07-31
Webmin MEDIUM 5.4
CVE-2023-38304

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality, allo…

No fix yet
Fix from $1,600 2023-07-31
Webmin MEDIUM 5.4
CVE-2023-38307

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality. The …

No fix yet
Fix from $1,600 2023-07-31
Webmin MEDIUM 5.4
CVE-2023-38310

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the configuration settings of the system…

No fix yet
Fix from $1,600 2023-07-31
Webmin MEDIUM 5.4
CVE-2023-38311

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the System Logs Viewer functionality. Th…

No fix yet
Fix from $1,600 2023-07-31
Webmin CRITICAL 9.6
CVE-2021-32157

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.

No fix yet
Fix from $2,300 2022-04-11
Webmin HIGH 8.8
CVE-2021-32156

A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.

No fix yet
Fix from $1,950 2022-04-11