Vendor
netbox-community
10 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Critical 9.6
NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request
NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the read_pickle_data function…
-
Critical 9.0
netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and …