Threat database

12 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.1	EPSS 0.5%	CVE-2024-40742Vuln-Netbox · n/a Medium6.1EPSS 0.5%2024-07-09CVE Database V5CVE-2024-40742 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the circuit ID parameter at /circuits/circuits/add. EPSS 0.5%Vulnerability	CVE Database V5	2024-07-09
High	7.1	EPSS 0.4%	CVE-2024-40741Vuln-Netbox · n/a High7.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40741 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the circuit ID parameter at /circuits/circuits/{id}/edit/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
Medium	6.1	EPSS 0.4%	CVE-2024-40739Vuln-Netbox · n/a Medium6.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40739 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-feeds/add. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
High	7.1	EPSS 0.4%	CVE-2024-40738Vuln-Netbox · n/a High7.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40738 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/console-ports/{id}/edit/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
Medium	6.1	EPSS 0.4%	CVE-2024-40734Vuln-Netbox · n/a Medium6.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40734 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/front-ports/add/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
Medium	6.1	EPSS 0.4%	CVE-2024-40733Vuln-Netbox · n/a Medium6.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40733 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/front-ports/{id}/edit/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
Medium	6.1	EPSS 0.4%	CVE-2024-40731Vuln-Netbox · n/a Medium6.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40731 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/rear-ports/{id}/edit/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
Medium	6.1	EPSS 0.4%	CVE-2024-40730Vuln-Netbox · n/a Medium6.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40730 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/interfaces/{id}/edit/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
High	7.1	EPSS 0.4%	CVE-2024-40729Vuln-Netbox · n/a High7.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40729 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/interfaces/add/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
Medium	5.4	EPSS 0.4%	CVE-2024-40727Vuln-Netbox · n/a Medium5.4EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40727 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/console-server-ports/add/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
Medium	6.1	EPSS 0.4%	CVE-2024-40726Vuln-Netbox · n/a Medium6.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-40726 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-ports/{id}/edit/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09
Medium	6.1	EPSS 0.4%	CVE-2024-38972Vuln-Netbox · n/a Medium6.1EPSS 0.4%2024-07-09CVE Database V5CVE-2024-38972 A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-ports/add/. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-09

Page 1 of 1