Lucene search
+L

1055 matches found

CNNVD
CNNVD
•added 2024/01/03 12:00 a.m.•20 views

Froxlor Input Validation Error Vulnerability

Froxlor is a suite of lightweight server management software from the Froxlor team. An input validation error vulnerability exists in versions of Froxlor prior to 2.1.2, which originated from a vulnerability that allows an attacker to bypass system restrictions by leaving basic fields of the...

7.5CVSS6.7AI score0.00716EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/03 12:00 a.m.•4 views

CVE-2023-50256: Improper Input Validation

Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registration form with the essential fields, such as the username and password, left intentionally blank. This inadvertent omission allowed for a bypass of the mandatory field requirements...

7.5CVSS7.1AI score0.00716EPSS
SaveExploits1References2
Veracode
Veracode
•added 2023/11/13 7:20 a.m.•160 views

Privilege Escalation

froxlor/froxlor is vulnerable to Privilege Escalation. The vulnerability is caused by improper handling of symbolic links. An attacker could write arbitrary data to the home directory and escalate privileges...

9.9CVSS7.4AI score0.00829EPSS
SaveExploits1References3Affected Software1
SUSE CVE
SUSE CVE
•added 2023/11/11 1:52 a.m.•10 views

SUSE CVE-2023-6069

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

9.9CVSS6.8AI score0.00829EPSS
SaveExploits1References3
osv_ghsa
osv_ghsa
•added 2023/11/10 3:30 a.m.•26 views

GHSA-4JCH-8QQ5-HQG6 Froxlor Improper Input Validation vulnerability

Improper Input Validation in GitHub repository froxlor/froxlor prior to 2.1.0-beta1...

9.9CVSS9.2AI score0.00829EPSS
SaveExploits1References4
NVD
NVD
•added 2023/11/10 1:15 a.m.•43 views

CVE-2023-6069

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

9.9CVSS0.00829EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/11/10 12:00 a.m.•27 views

CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

9.9CVSS7.2AI score
SaveExploits0References4
CVE
CVE
•added 2023/11/10 12:00 a.m.•132 views

CVE-2023-6069

Froxlor (froxlor/froxlor) is affected by CVE-2023-6069 due to an Improper Link Resolution Before File Access in versions prior to 2.1.0. The underlying issue is in how links are resolved before file access, enabling high-impact outcomes per NVD and CNA metrics. Reported CVSS v3.1 base scores indi...

9.9CVSS8.2AI score0.00829EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/11/10 12:00 a.m.•41 views

CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

9.9CVSS9.8AI score0.00829EPSS
SaveExploits1References2
Mend
Mend
•added 2023/11/10 12:00 a.m.•7 views

CVE-2023-6069

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

9.9CVSS0.00829EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/11/10 12:00 a.m.•24 views

Froxlor Backlink Vulnerability

Froxlor is a lightweight server management software from the Froxlor team. A backlink vulnerability exists in Froxlor versions prior to 2.1.0 that stems from the presence of an improper input validation vulnerability...

9.9CVSS6.7AI score0.00829EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/10 12:00 a.m.•3 views

CVE-2023-6069: Improper Link Resolution Before File Access

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

9.9CVSS8.2AI score0.00829EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/11/09 12:00 a.m.•15 views

PT-2023-32495 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.1.0 Description: The issue is related to improper input validation in the GitHub repository froxlor/froxlor. This can lead to potential security risks. Recommendations: For versions prior to 2.1.0, update to versio...

9.9CVSS8.9AI score0.00829EPSS
SaveExploits1References8
SUSE CVE
SUSE CVE
•added 2023/10/17 1:00 a.m.•15 views

SUSE CVE-2023-4829

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...

5.4CVSS6AI score0.0044EPSS
SaveExploits1References3
Veracode
Veracode
•added 2023/10/16 8:50 a.m.•25 views

Cross-site Scripting (XSS)

froxlor/froxlor is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the markdown syntax in the customnotes field is improperly sanitized which allows an attacker to inject and execute html scripts...

4.8CVSS6.6AI score0.00418EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2023/10/16 6:20 a.m.•23 views

Cross-site Scripting

froxlor is vulnerable to Cross-site Scripting. The vulnerability is due to the improper sanitization or validation of input. The attacker can exploit this issue by injecting malicious JavaScript into the webpage...

5.4CVSS6.8AI score0.0044EPSS
SaveExploits1References3Affected Software1
SUSE CVE
SUSE CVE
•added 2023/10/14 1:13 a.m.•8 views

SUSE CVE-2023-5564

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1...

5.2CVSS6AI score0.00418EPSS
SaveExploits1References3
osv_ghsa
osv_ghsa
•added 2023/10/13 3:30 p.m.•93 views

GHSA-CVWV-H85M-W37H Cross-site Scripting (XSS) in froxlor/froxlor

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...

4.8CVSS4.6AI score0.0044EPSS
SaveExploits1References4
NVD
NVD
•added 2023/10/13 1:15 p.m.•45 views

CVE-2023-4829

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...

5.4CVSS4.6AI score0.0044EPSS
SaveExploits1References2
Prion
Prion
•added 2023/10/13 1:15 p.m.•27 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...

4CVSS5.3AI score0.0044EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder