Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 23

Export CSV
CVE-2022-26019

Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change NTP GPS settings to rewrite existing files on the file system, which may result in arbitrary command execution.

CVSS 3.1 · 8.8 High EPSS 4.5% KEV · Not listed
Vendors
Netgate
Products
Pfsense Pfsense Plus
CVE-2022-24299

Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Netgate
Products
Pfsense Pfsense Plus
CVE-2021-20729

Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2.5.2 and earlier, and pfSense Plus software versions 21.05 and earlier) allows a remote attacker to inject an arbitrary script via a malicious URL.

CVSS 3.1 · 6.1 Medium EPSS 2.9% KEV · Not listed
Vendors
Netgate Pfsense
Products
Pfsense Plus Pfsense