PT-2024-5307 · Phpipam · Phpipam

Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the appadminfirewall-zoneszones-edit-network.php script in the phpipam web application for IP address management. The vulnerability...

CVE-2024-41355

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/tools/request-ip/index.php...

CVE-2024-41356

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\firewall-zones\zones-edit-network.php...

PT-2024-5305 · Phpipam · Phpipam

Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to Cross Site Scripting XSS in the phpipam application. Specifically, the "/app/admin/widgets/edit.php" endpoint is vulnerable. This vulnerability can be exploited by a remote attacker to...

PT-2024-5278 · Phpipam · Phpipam

Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It exists due to insufficient protection of the web page structure in the appadmingroupsedit-group.php script of the phpipam web application fo...

phpIPAM 安全漏洞

phpIPAM is the phpIPAM open source suite of open source PHP and MySQL based IP address management applications IPAM. A security vulnerability exists in phpIPAM version 1.6, which stems from a cross-site scripting vulnerability contained in the appadmingroupsedit-group.php file...

CVE-2024-41354

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via the /app/admin/widgets/edit.php endpoint. The issue is described across multiple sources (CVE-2024-41354 in various feeds); no official patch/version fix is disclosed in the provided documents. The vulnerability enables XSS in the widget...

CVE-2024-41355

The CVE-2024-41355 entry concerns phpipam 1.6 and a Cross Site Scripting (XSS) vulnerability exploitable through /app/tools/request-ip/index.php. The connected sources confirm the affected product and endpoint but do not provide details on root cause, exploitability status, or a patch/remediation...

PT-2024-5308 · Phpipam · Phpipam

Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to a lack of protection for the web page structure in the phpipam web application for IP address management. This can be exploited by a remote attacker to conduct a cross-site scripting XS...

phpIPAM 安全漏洞

phpIPAM is the phpIPAM open source suite of open source PHP and MySQL based IP address management applications IPAM. A security vulnerability exists in phpIPAM version 1.6, which stems from a cross-site scripting vulnerability contained in the /app/admin/widgets/edit.php file...

phpIPAM 安全漏洞

phpIPAM is the phpIPAM open source suite of open source PHP and MySQL based IP address management applications IPAM. A security vulnerability exists in phpIPAM version 1.6, which stems from a cross-site scripting vulnerability contained in the appadminfirewall-zoneszones-edit-network.php file...

CVE-2024-41353

CVE-2024-41353 affects phpIPAM 1.6, with a Cross Site Scripting (XSS) vulnerability in app/admin/groups/edit-group.php. The issue is documented across multiple feeds (NVD, Red Hat, OSV, CNNVD, CVE list, CVE.org) noting XSS via the affected script. The exposed component is the edit-group.php handl...

CVE-2024-41357

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/powerDNS/record-edit.php...

CVE-2024-41357

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/powerDNS/record-edit.php...

OPENSUSE-SU-2024:10402-1 lighttpd-1.4.37-1.6 on GA media

These are all security issues fixed in the lighttpd-1.4.37-1.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11505-1 libwavpack1-32bit-5.4.0-1.6 on GA media

These are all security issues fixed in the libwavpack1-32bit-5.4.0-1.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11393-1 libSoundTouch1-2.2-1.6 on GA media

These are all security issues fixed in the libSoundTouch1-2.2-1.6 package on the GA media of openSUSE Tumbleweed...

PT-2024-26: Improper Authorization leads to web administration interface access in UniPORT E-slip

The vulnerability was identified in UniPORT E-slip 1.4.0.0 and lower. The discovered vulnerability is caused by insufficient input data validation. It can be exploited by an attacker to gain access to the application administration web-interface. The vulnerability is unexploitable in versions...

SUSE CVE-2024-37383

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes...

Roundcube Webmail Security Vulnerability

Roundcube Webmail is an open source browser-based IMAP client that supports address book management, message searching, spell checking and more. A security vulnerability exists in Roundcube Webmail versions prior to 1.5.7, 1.6.x through 1.6.7, which originates from allowing cross-site scripting...