Login Request a demo
VI
Product
Virtualmin
by Virtualmin · last CVE Sep 4, 2024
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 1Medium 8Low 0
Severity
All severities9Critical0High1Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Virtualmin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-45692
7.5
1%
Sep 4
Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000
Affected: before 7.20.2
CVE-2018-18208
6.1
1%
Oct 10
Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI
Affected: 6.03
CVE-2018-18207
6.1
1%
Oct 10
Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter
Affected: 6.03
CVE-2023-47099
5.4
0%
Nov 1
A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via Description…
Affected: 7.7
CVE-2023-47097
5.4
0%
Nov 1
A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via…
Affected: 7.7
CVE-2023-47096
5.4
0%
Nov 1
A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script…
Affected: 7.7
CVE-2023-47095
5.4
0%
Nov 1
A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows remote attackers to inject…
Affected: 7.7
CVE-2023-47094
5.4
0%
Nov 1
A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via…
Affected: 7.7
CVE-2023-47098
4.8
0%
Nov 1
A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote attackers to inject arbitrary web script…
Affected: 7.7
Showing 9