1691 matches found
CVE-2017-9313
Multiple Cross-site scripting XSS vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to viewman.cgi, the referers parameter to changereferers.cgi, or the name parameter to saveuser.cgi. NOTE: these issues were not fixed in...
CVE-2017-9313
CVE-2017-9313 affects Webmin prior to 1.850. The issue comprises multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via: (1) the sec parameter to view_man.cgi, (2) the referers parameter to change_referers.cgi, and (3) the name p...
CVE-2017-9313
Multiple Cross-site scripting XSS vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to viewman.cgi, the referers parameter to changereferers.cgi, or the name parameter to saveuser.cgi. NOTE: these issues were not fixed in...
CVE-2017-9313
Multiple Cross-site scripting XSS vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to viewman.cgi, the referers parameter to changereferers.cgi, or the name parameter to saveuser.cgi. NOTE: these issues were not fixed in...
Webmin 1.840 Cross Site Scripting Vulnerability
Exploit for cgi platform in category web applications Vulnerability type: Reflected Cross Site Scripting ------------------------ Product: Webmin ------------------------ Affected version: Webmin 1.840 and possibly earlier ------------------------ Patched version: Webmin 1.850...
PT-2017-18840
Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.850 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the sec parameter to "view man.cgi", the referers parameter to "change referers.cgi", or the...
CVE-2017-9313: Improper Neutralization of Input During Web Page Generation
Multiple Cross-site scripting XSS vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to viewman.cgi, the referers parameter to changereferers.cgi, or the name parameter to saveuser.cgi. NOTE: these issues were not fixed in...
Webmin 1.840 Cross Site Scripting
Vulnerability type: Reflected Cross Site Scripting ------------------------ Product: Webmin ------------------------ Affected version: Webmin 1.840 and possibly earlier ------------------------ Patched version: Webmin 1.850 ------------------------ Credit: Andy Tan ------------------------ CVE ID...
MGASA-2017-0142 Updated webmin packages fix security vulnerability
The webmin package has been updated to version 1.840, which fixes cross-site scripting XSS issues, and has other bug fixes and enhancements. See the upstream release announcements and change log for details...
Updated webmin packages fix security vulnerability
The webmin package has been updated to version 1.840, which fixes cross-site scripting XSS issues, and has other bug fixes and enhancements. See the upstream release announcements and change log for details...
PT-2017-19425
Name of the Vulnerable Software and Affected Versions webmin versions prior to 1.840 Description The issue concerns cross-site scripting XSS problems. For more details, refer to the upstream release announcements and change log. Recommendations For versions prior to 1.840, update to version 1.840...
Cross site scripting
Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2106
Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2106
Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2106
Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2106
Webmin versions prior to 1.830 are affected by multiple cross-site scripting vulnerabilities (CVE-2017-2106). The issues allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected component: Webmin web interface; root cause involves improper handling of error ...
CVE-2017-2106
Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2106: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2017-15173
Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.830 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting vulnerabilities. Recommendations For versions prior to...
Workarounds Available for Flaws in Siemens RUGGEDCOM Gear
Update Siemens industrial VPN and firewall appliances used in severe environments remain unpatched after an advisory from ICS-CERT on Tuesday disclosed that a number of serious vulnerabilities exist in the gear. Siemens has made a number of recommendations for workarounds, but it’s unknown whethe...