Skip to content
OpenAdvisories

Vendor

netbox-community

10 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.6

    NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

    NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the read_pickle_data function…

  • Critical 9.0

    netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and …