US
Product
Usermin
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 15Low 0
Watch
Add Usermin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36453 | 6.1 | Jul 10 | Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820 Affected: before 1.820 |
| CVE-2023-41162 | 6.1 | Sep 13 | A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask… Affected: 2.000 |
| CVE-2022-36880 | 6.1 | Jul 27 | The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message Affected: through 1.850 |
| CVE-2016-4897 | 6.1 | Apr 12 | Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter/save.cgi, (3) /man/search.cgi in Usermin before 1.690 Affected: through 1.680 |
| CVE-2023-41157 | 5.4 | Sep 16 | Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name parameter while… Affected: 2.000 |
| CVE-2023-41160 | 5.4 | Sep 14 | A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name… Affected: 2.001 |
| CVE-2023-41159 | 5.4 | Sep 14 | A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing… Affected: 2.000 |
| CVE-2023-41156 | 5.4 | Sep 14 | A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the save… Affected: 2.001 |
| CVE-2023-41158 | 5.4 | Sep 13 | A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description… Affected: 2.000 |
| CVE-2023-41155 | 5.4 | Sep 13 | A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML… Affected: 2.000 |
| CVE-2023-41154 | 5.4 | Sep 13 | A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value… Affected: 2.000 |
| CVE-2023-41152 | 5.4 | Sep 13 | A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle… Affected: 2.000 |
| CVE-2023-41161 | 5.4 | Sep 7 | Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages… Affected: 2.000 |
| CVE-2023-41153 | 5.4 | Aug 29 | A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via options for the… Affected: 2.001 |
| CVE-2024-44762 | 5.3 | Oct 16 | A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts Affected: 2.100 |
Showing 15