Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Openwebif Project Component: Openwebif Clear all filters
TI-2021-15796 CVE-2021-38113 · GHSA-346p-9xff-4p8r

In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7…

Priority LOW 25

In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of the Bouquet Editor (i.e., bouqueteditor/api/addbouquet?name=) leads to Stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00522 Published 2021-08-04 No fix listed CWE-79
TI-2017-06761 CVE-2017-9333 · GHSA-xjpr-5xvx-vr58

OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the…

Priority MEDIUM 42

OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers to an attacker-controlled web site with a Trojan horse packag…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02275 Published 2017-09-18 No fix listed CWE-20