webmin Vulnerability Advisory Catalog

Total 98 security vulnerabilities recorded for webmin software and firmware.

← Back to All Vendors
Component: usermin

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web scrip...

📅 2023-09-13
CVSS 5.4 Dossier →
Component: usermin

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key ...

📅 2023-09-07
CVSS 5.4 Dossier →
Component: webmin

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script o...

📅 2023-08-30
CVSS 6.1 Dossier →
Component: usermin

A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script...

📅 2023-08-29
CVSS 5.4 Dossier →
Component: webmin

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the System Logs Viewer functionality. The...

📅 2023-07-31
CVSS 5.4 Dossier →
Component: webmin

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the configuration settings of the system ...

📅 2023-07-31
CVSS 5.4 Dossier →
Component: webmin

An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the package search functionality. The ...

📅 2023-07-31
CVSS 6.1 Dossier →
Component: webmin

An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was discovered in the HTTP Tunnel functionality when handling thir...

📅 2023-07-31
CVSS 6.1 Dossier →
Component: webmin

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality. The v...

📅 2023-07-31
CVSS 5.4 Dossier →
Component: webmin

An issue was discovered in Webmin 2.021. A Cross-site Scripting (XSS) Bypass vulnerability was discovered in the file upload functionality. Normally, ...

📅 2023-07-31
CVSS 6.1 Dossier →
Component: webmin

An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By provi...

📅 2023-07-31
CVSS 6.1 Dossier →
Component: webmin

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality, allow...

📅 2023-07-31
CVSS 5.4 Dossier →
Component: webmin

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RCE) through ...

📅 2023-07-31
CVSS 5.4 Dossier →
Component: webmin

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The mani...

📅 2022-11-02
CVSS 3.5 Dossier →
Component: usermin

Usermin through 1.850 allows a remote authenticated user to execute OS commands via command injection in a filename for the GPG module....

📅 2022-10-25
CVSS 8.8 Dossier →
Component: usermin

The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message....

📅 2022-07-27
CVSS 6.1 Dossier →
CVE-2022-36446 CRITICAL
Component: webmin

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command....

📅 2022-07-25
CVSS 9.8 Dossier →
Component: webmin

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created (i.e., not created in Virtu...

📅 2022-05-15
CVSS 8.8 Dossier →
Component: webmin

A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager feature....

📅 2022-04-11
CVSS 8.8 Dossier →
Component: webmin

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the File Manager feature....

📅 2022-04-11
CVSS 6.1 Dossier →
Component: webmin

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature....

📅 2022-04-11
CVSS 6.1 Dossier →
Component: webmin

A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and Download feature....

📅 2022-04-11
CVSS 8.8 Dossier →
Component: webmin

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download feature....

📅 2022-04-11
CVSS 6.1 Dossier →
CVE-2021-32157 CRITICAL
Component: webmin

A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature....

📅 2022-04-11
CVSS 9.6 Dossier →
Page 2 of 5 (98 Total Records)