Advisories · Technology
webmin.
Every CVE that names webmin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Webmin: SSRF exploit in Upload and Download and File Manager modules
- webmin
- Server-side request forgery (SSRF)
- CVSS 9.6 CriticalCritical · CVSS 9+
Webmin: Reflected XSS in the Configuration module
- webmin
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Webmin 2FA requirement bypass
- webmin
- Authentication bypass
- CVSS 9.2 CriticalCritical · CVSS 9+
Webmin HTTP header authentication bypass
- Webmin
- Authentication bypass
- CVSS 6.9 Medium
Webmin information disclosure via regex pattern
- Webmin
- CWE-185
- CWE-777
- CVSS 6.9 Medium
Webmin MFA bypass
- Webmin
- CWE-308
- CVSS 9.4 CriticalCritical · CVSS 9+
Path traversal in Webmin
- Webmin
- Path traversal
- CVSS 6.1 Medium
Cross-site scripting in Webmin
- Webmin
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Webmin < 2.641 Stored XSS via System and Server Status
- Webmin
- Cross-site scripting (XSS)
- CVSS 8.5 High
OS command injection in Webmin
- Webmin
- Command injection
- CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Webmin CGI Command Injection Remote Code Execution Vulnerability
- Webmin
- Command injection
- CVSS 6.1 Medium
Cross-site scripting in Webmin and others
- Webmin
- Webmin Usermin
- Cross-site scripting (XSS)
- CVSS 3.1 Low
Cross-site request forgery in Webmin
- Webmin
- Cross-site request forgery (CSRF)
- CVSS 8.8 High
Webmin: Improper handling of insufficient permissions or privileges vulnerability exists in…
- Webmin
- CWE-280
- CVSS 5.4 Medium
Cross-site scripting in Webmin
- Webmin
- Cross-site scripting (XSS)
- CVSS 3.5 Low
Webmin index.cgi cross site scripting
- Webmin
- Cross-site scripting (XSS)
-
Webmin: Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows…
- Webmin