Show filters
40 Total Results
Displaying 31-40 of 40
Sort by:
Attacker Value
Unknown
CVE-2023-33792
Disclosure Date: May 24, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in the Create Site Groups (/dcim/site-groups/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2023-33791
Disclosure Date: May 24, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in the Create Provider Accounts (/circuits/provider-accounts/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2023-33790
Disclosure Date: May 24, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in the Create Locations (/dcim/locations/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2023-33789
Disclosure Date: May 24, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in the Create Contact Groups (/tenancy/contact-groups/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2023-33788
Disclosure Date: May 24, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in the Create Providers (/circuits/providers/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2023-33787
Disclosure Date: May 24, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in the Create Tenant Groups (/tenancy/tenant-groups/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2023-33786
Disclosure Date: May 24, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in the Create Circuit Types (/circuits/circuit-types/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2023-33785
Disclosure Date: May 24, 2023 (last updated February 25, 2025)
A stored cross-site scripting (XSS) vulnerability in the Create Rack Roles (/dcim/rack-roles/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
0
Attacker Value
Unknown
CVE-2019-25011
Disclosure Date: December 31, 2020 (last updated February 22, 2025)
NetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rendered field, as demonstrated by /dcim/sites/add/ comments.
0
Attacker Value
Unknown
CVE-2006-3367
Disclosure Date: July 06, 2006 (last updated October 04, 2023)
Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration.
0
