Browse CVEs

HIGH 8.8 CVE-2021-32159 A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and Download feature. Webmin No fix yet Fix from $1,9502022-04-11 HIGH 8.8 CVE-2021-32162 A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager feature. Webmin No fix yet Fix from $1,9502022-04-11 MEDIUM 6.1 CVE-2021-32158 A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download feature. Webmin No fix yet Fix from $1,6002022-04-11 MEDIUM 6.1 CVE-2021-32160 A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature. Webmin No fix yet Fix from $1,6002022-04-11 MEDIUM 6.1 CVE-2021-32161 A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the File Manager feature. Webmin No fix yet Fix from $1,6002022-04-11 CRITICAL 9.6 CVE-2021-31761EPSS 34% Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature. Webmin No fix yet Fix from $2,3002021-04-25 HIGH 8.8 CVE-2021-31760EPSS 8% Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process feature. Webmin No fix yet Fix from $1,9502021-04-25 HIGH 8.8 CVE-2021-31762EPSS 9% Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users feature, and then get a reverse … Webmin No fix yet Fix from $1,9502021-04-25 MEDIUM 5.4 CVE-2018-19191EPSS 39% Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall o… Webmin No fix yet Fix from $1,6002019-03-21 HIGH 7.8 CVE-2019-9624EPSS 24% Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a… Webmin No fix yet Fix from $1,9502019-03-07 CRITICAL 9.8 CVE-2018-8712 An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak d… Webmin Mitigation only Fix from $2,3002018-03-14 HIGH 9.3 CVE-2002-2360 The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary f… Webmin No fix yet Fix from $1,9502002-12-31