WE
Product
Webmin
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Webmin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36451 | 8.8 | Jul 10 | Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003 Affected: before 2.003 |
| CVE-2012-4893 | – | Sep 11 | Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for… Affected: through 1.590; 1.140; 1.150; 1.160; 1.170; 1.180; +33 more |
| CVE-2012-2983 | – | Sep 11 | file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary… Affected: through 1.590; 1.140; 1.150; 1.160; 1.170; 1.180; +33 more |
| CVE-2012-2982 | – | Sep 11 | file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe)… Affected: through 1.590; 1.140; 1.150; 1.160; 1.170; 1.180; +33 more |
| CVE-2012-2981 | – | Sep 11 | Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter Affected: through 1.590; 1.140; 1.150; 1.160; 1.170; 1.180; +33 more |
| CVE-2005-0427 | – | May 2 | The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows… Affected: 1.140; 1.150; 1.160; 1.170; 1.170 |
Showing 6