CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

517 matches found

CVE•added 2023/03/06 12:0 a.m.•72 views

CVE-2023-1212

CVE-2023-1212 corresponds to a stored Cross-site Scripting (XSS) vulnerability in phpIPAM prior to version 1.5.2. The issue affects user-facing inputs that are stored and later rendered, enabling script injection via vectors described in the sources (e.g., instructions widget and user widgets). A...

5.9CVSS5AI score0.00473EPSS

Exploits1References2Affected Software1

OSV•added 2023/03/06 12:0 a.m.•17 views

CVE-2023-1212 Cross-site Scripting (XSS) - Stored in phpipam/phpipam

Cross-site Scripting XSS - Stored in GitHub repository phpipam/phpipam prior to v1.5.2...

5.9CVSS6.7AI score0.00473EPSS

Exploits1References4

Cvelist•added 2023/03/06 12:0 a.m.•18 views

CVE-2023-1211 SQL Injection in phpipam/phpipam

SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2...

7.2CVSS7.6AI score0.0305EPSS

Exploits3References2

CNVD•added 2023/02/07 12:0 a.m.•18 views

phpIPAM Cross-Site Scripting Vulnerability (CNVD-2023-09715)

phpIPAM is an open source PHP and MySQL-based IP address management application IPAM. phpIPAM versions prior to 1.5.1 contain a cross-site scripting vulnerability that stems from cross-site scripting when an application receives an HTTP request and then the data responds in an insecure manner. No...

6.1CVSS0.6AI score0.00448EPSS

Exploits1References1

CNVD•added 2023/02/07 12:0 a.m.•36 views

phpIPAM authorization issue issue vulnerability

phpIPAM is an open source PHP and MySQL-based IP address management application IPAM. phpIPAM versions prior to 1.5.1 are vulnerable to authorization issues, which can be exploited by attackers to download the findfullsubnets.php endpoint containing sensitive information...

7.5CVSS4.3AI score0.37304EPSS

Exploits1References1

CNVD•added 2023/02/07 12:0 a.m.•14 views

phpIPAM Cross-Site Scripting Vulnerability (CNVD-2023-09716)

phpIPAM is an open source PHP and MySQL-based IP address management application IPAM. phpIPAM versions prior to 1.5.1 are vulnerable to a cross-site scripting vulnerability, which stems from cross-site scripting when the application responds in an insecure manner to data after receiving an HTTP...

6.1CVSS0.6AI score0.01532EPSS

Exploits1References1

OpenVAS•added 2023/02/06 12:0 a.m.•26 views

phpIPAM < 1.5.1 Multiple Vulnerabilities

phpIPAM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpipam:phpipam"; ifdescription...

7.5CVSS4.9AI score0.37304EPSS

Exploits3References3