Lucene search
+L

102 matches found

OpenVAS
OpenVAS
added 2021/10/27 12:0 a.m.18 views

Pi-hole Web Interface < 5.8 XSS Vulnerability

The Pi-hole Web Interface previously AdminLTE is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.3CVSS5.3AI score0.00871EPSS
SaveExploits1References2
OSV
OSV
added 2021/10/26 2:15 p.m.18 views

CVE-2021-41175

Pi-hole's Web interface based on AdminLTE provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8...

5.4CVSS6.1AI score
SaveExploits0References3
Prion
Prion
added 2021/10/26 2:15 p.m.21 views

Cross site scripting

Pi-hole's Web interface based on AdminLTE provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8...

3.5CVSS5.2AI score0.00871EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2021/10/26 2:10 p.m.70 views

CVE-2021-41175

Pi-hole Web Interface (AdminLTE) is affected by a Stored XSS vulnerability in the groups-clients management page. The issue exists prior to version 5.8 and can be triggered when adding a client, enabling an attacker with access to the web UI to inject and execute script in an authenticated contex...

7.3CVSS5.5AI score0.00871EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2021/09/17 7:15 a.m.25 views

CVE-2021-3812

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS0.0055EPSS
SaveExploits1References2
OSV
OSV
added 2021/09/17 7:15 a.m.16 views

CVE-2021-3812

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6.8AI score
SaveExploits0References2
OSV
OSV
added 2021/09/17 7:15 a.m.14 views

CVE-2021-3811

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2021/09/17 7:15 a.m.22 views

CVE-2021-3811

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS0.0055EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/09/17 7:15 a.m.5 views

CVE-2021-3812

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS6.7AI score0.0055EPSS
SaveExploits1References3
Prion
Prion
added 2021/09/17 7:15 a.m.20 views

Cross site scripting

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

4.3CVSS6.2AI score0.0055EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/09/17 7:15 a.m.24 views

Cross site scripting

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

4.3CVSS6.2AI score0.0055EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/17 7:15 a.m.5 views

CVE-2021-3811

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS6.7AI score0.0055EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/09/17 6:15 a.m.30 views

CVE-2021-3812 Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS6.6AI score0.0055EPSS
SaveExploits1References2
CVE
CVE
added 2021/09/17 6:15 a.m.54 views

CVE-2021-3812

CVE-2021-3812 affects the Pi-hole Web Interface (AdminLTE) component. The vulnerability is a Cross-site Scripting (XSS) issue caused by improper neutralization of input during web page generation, with multiple sources indicating a reflected XSS in pi-hole/adminlte. Impact is described as potenti...

6.7CVSS6.2AI score0.0055EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/09/17 6:15 a.m.35 views

CVE-2021-3811 Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS6.6AI score0.0055EPSS
SaveExploits1References2
CVE
CVE
added 2021/09/17 6:15 a.m.60 views

CVE-2021-3811

CVE-2021-3811 affects Pi-hole’s AdminLTE (the Pi-hole web interface). The vulnerability is an XSS in the adminlte component caused by improper neutralization of input during web page generation. The documented impact is a reflected Cross-site Scripting vulnerability exposed via a POST parameter (...

6.7CVSS6.2AI score0.0055EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/09/17 12:0 a.m.8 views

Pi-Hole Adminlte 跨站脚本漏洞

Pi-Hole Adminlte is a Pi-Hole control panel. It is used for statistical More... Pi-Hole adminlte suffers from a cross-site scripting vulnerability that stems from the vulnerability to incorrect neutralization of input during web page generation "cross-site scripting"...

6.7CVSS6.5AI score0.0055EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/09/17 12:0 a.m.8 views

Pi-Hole Adminlte 跨站脚本漏洞

Pi-Hole Adminlte is a Pi-Hole control panel. It is used for statistical More... Pi-Hole adminlte suffers from a cross-site scripting vulnerability that stems from the vulnerability to incorrect neutralization of input during web page generation "cross-site scripting"...

6.7CVSS6.5AI score0.0055EPSS
SaveExploits1References3
OSV
OSV
added 2021/09/15 7:15 a.m.21 views

CVE-2021-3706

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...

7.5CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2021/09/15 7:15 a.m.31 views

CVE-2021-3706

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...

7.5CVSS0.01101EPSS
SaveExploits1References2
Rows per page
Query Builder