Vulnerabilities > Daloradius

DATE CVE VULNERABILITY TITLE RISK
2023-01-17 CVE-2023-0337 Cross-site Scripting vulnerability in Daloradius
Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
network
low complexity
daloradius CWE-79
6.1
2023-01-17 CVE-2023-0338 Cross-site Scripting vulnerability in Daloradius
Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
network
low complexity
daloradius CWE-79
6.1
2023-01-04 CVE-2023-0048 Code Injection vulnerability in Daloradius
Code Injection in GitHub repository lirantal/daloradius prior to master-branch.
network
low complexity
daloradius CWE-94
8.8
2023-01-04 CVE-2023-0046 Improper Restriction of Names for Files and Other Resources vulnerability in Daloradius
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch.
network
low complexity
daloradius CWE-641
7.2
2022-12-21 CVE-2022-4630 Incorrect Permission Assignment for Critical Resource vulnerability in Daloradius
Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.
network
low complexity
daloradius CWE-732
5.3
2022-12-08 CVE-2022-4366 Missing Authorization vulnerability in Daloradius
Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.
network
low complexity
daloradius CWE-862
7.5
2022-12-06 CVE-2022-23475 Cross-site Scripting vulnerability in Daloradius
daloRADIUS is an open source RADIUS web management application.
network
low complexity
daloradius CWE-79
8.8