681 matches found
Exploit for CVE-2024-23780
CVE-2024-23780 Exploit for Netbox This script exploits CVE-20...
PT-2024-20080 · Netbox · Netbox
Name of the Vulnerable Software and Affected Versions: NetBox affected versions not specified Description: The issue affects NetBox's security landscape. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
CVE-2024-0948
DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The attack may be...
CVE-2024-0948 NetBox Home Page Configuration config-revisions cross site scripting
DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...
CVE-2024-0948 NetBox Home Page Configuration config-revisions cross site scripting
DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...
CVE-2024-0948 NetBox Home Page Configuration config-revisions cross site scripting
DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...
CVE-2024-0948
NetBox is affected up to version 3.7.0 by a vulnerability in the /core/config-revisions handler that can lead to cross-site scripting when processing input such as test. Descriptions consistently indicate the issue is a XSS flaw resulting from unknown processing in the Home Page Configuration com...
PT-2024-15929 · Netbox · Netbox
Name of the Vulnerable Software and Affected Versions: NetBox versions up to 3.7.0 Description: A problematic issue has been found in the processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The...
CVE-2024-0948: Improper Neutralization of Input During Web Page Generation
DISPUTED A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input test leads to cross site scripting. The atta...
NetBox Cross-Site Scripting Vulnerability
NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox 3.7.0 and earlier versions, which stems from /core/config-revisions in the component Home Page...
CVE-2023-36234
Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...
CVE-2023-36234
Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...
Cross site scripting
Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...
NetBox Cross-Site Scripting Vulnerability
NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version 3.5.1 that originates from allowing an attacker to execute arbitrary code via the Name field in the...
CVE-2023-36234
NetBox 3.5.1 contains a Cross-Site Scripting (XSS) vulnerability exploitable via the Name field in device-roles/add. The root cause is not explicitly detailed in the provided documents beyond the XSS issue. Impact per the CVE metrics indicates limited impact with a Medium severity (CVSS v3.1: AV:...
PT-2023-25491 · Netbox · Netbox
Name of the Vulnerable Software and Affected Versions: Netbox version 3.5.1 Description: The issue allows attackers to execute arbitrary code via the Name field in the device-roles/add function, which is a Cross Site Scripting XSS vulnerability. This enables attackers to inject malicious scripts...
CVE-2023-36234
Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...
CVE-2023-36234
Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...
CVE-2023-36234: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...