521 matches found
EUVD-2026-71975
NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks. Authenticated users with view permissions can access all users' private records through unscoped querysets, disclosing which users watch or bookmark...
CVE-2026-86176
NetBox through 4.7.0 fails to properly scope user-private records in its REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks . The root cause is the use of unscoped querysets , which allows any authenticated user with view permissions to access all users' private record...
CVE-2026-86175
NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses . Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, enabling unauthorized access to e...
EUVD-2026-71974
NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...
netbox
La pierre angulaire de tout réseau automatisé NetBox Community | NetBox Cloud | NetBox Enterprise...
Netbox-CVE-2023-37625
Netbox-CVE-2023-37625 설명 Netbox alert1' 3. 새로운 모델을 추가합니다. 이 예제에서는 'manufacturer' 모델을 추가합니다. 4. 새로 생성된 모델을 인증된 사용자로 열고, 경고 상자가 실행되었음을 확인합니다...
CVE-2026-73229 vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, netbox-fips, authentik, netbox...
GHSA-2M8G-3CMR-WG3W vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, netbox-fips, authentik, netbox...
CVE-2026-73228 vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, netbox-fips, authentik, netbox...
GHSA-G47C-3XMW-Q6M2 vulnerabilities
Vulnerabilities for packages: awx, authentik-fips, netbox-fips, authentik, netbox...
CVE-2024-23780
Exploit CVE-2024-23780 pour Netbox Ce script exploite la CVE-2024-23780, qui permet l'exécution de code à distance RCE sur des instances Netbox. Utilisation python netboxexploit.py --url --username --password Paramètres --url : URL de l'instance Netbox. --username : Nom d'utilisateur pour...
CVE-2025-69848-security-advisories
XSS réfléchie dans la gestion de ProtectedError de NetBox CVE-2025-69848 Vue d'ensemble NetBox est une plateforme open-source de modélisation des ressources d'infrastructure et de gestion des adresses IP. Une vulnérabilité de type cross-site scripting XSS réfléchi existe dans la logique de gestio...
CVE-2026-54284 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.1, datahub-ingestion-fips, openstack-nova-2026.1, pgadmin4, airflow-core, dbt-core, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, openstack-keystone-2026.1, apache-beam-python-3.14-sdk, openstack-horizon-2026.1-fips,...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.1, datahub-ingestion-fips, openstack-nova-2026.1, pgadmin4, airflow-core, dbt-core, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, openstack-keystone-2026.1, apache-beam-python-3.14-sdk, openstack-horizon-2026.1-fips,...
GHSA-PWGV-4X5Q-6M9F vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.1, datahub-ingestion-fips, openstack-nova-2026.1, pgadmin4, airflow-core, dbt-core, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, openstack-keystone-2026.1, apache-beam-python-3.14-sdk, openstack-horizon-2026.1-fips,...
GHSA-PRG7-HCFM-MFCR vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.1, datahub-ingestion-fips, openstack-nova-2026.1, pgadmin4, airflow-core, dbt-core, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, openstack-keystone-2026.1, apache-beam-python-3.14-sdk, openstack-horizon-2026.1-fips,...
CVE-2026-59894 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.1, datahub-ingestion-fips, openstack-nova-2026.1, pgadmin4, airflow-core, dbt-core, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, openstack-keystone-2026.1, apache-beam-python-3.14-sdk, openstack-horizon-2026.1-fips,...
GHSA-3496-9G83-7V6X vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.1, datahub-ingestion-fips, openstack-nova-2026.1, pgadmin4, airflow-core, dbt-core, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, openstack-keystone-2026.1, apache-beam-python-3.14-sdk, openstack-horizon-2026.1-fips,...