515 matches found
CVE-2025-1071
The CVE-2025-1071 issue affects WatchGuard Fireware OS (Firebox) with the spamBlocker module, where improper input neutralization during web page generation enables Stored XSS. The vulnerability requires an authenticated administrator session to a locally managed Firebox and affects Fireware OS v...
CVE-2025-1071 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally managed Firebox.This issue affects Firewa...
WatchGuard Fireware OS 安全漏洞
WatchGuard Fireware OS is a software from WatchGuard USA that runs on Firebox. A security vulnerability exists in WatchGuard Fireware OS versions 12.0 through 12.5.12+701324 and 12.6 through 12.11, which stems from improper input neutralization during web page generation and is susceptible to...
WatchGuard Fireware OS 安全漏洞
WatchGuard Fireware OS is a software from WatchGuard USA that runs on Firebox. A security vulnerability exists in WatchGuard Fireware OS versions 12.0 through 12.5.12+701324 and 12.6 through 12.11, which stems from improper input neutralization during web page generation and is susceptible to...
WatchGuard Fireware OS 安全漏洞
WatchGuard Fireware OS is a software from WatchGuard USA that runs on Firebox. A security vulnerability exists in WatchGuard Fireware OS versions 12.0 through 12.11, which stems from improper validation of the HTTP Host header and could lead to cache poisoning or malicious redirection...
PT-2025-6779 · Watchguard · Watchguard Fireware
Name of the Vulnerable Software and Affected Versions: WatchGuard Fireware OS versions 12.0 through 12.11 Description: The issue is related to improper input validation, allowing an attacker to manipulate the value of the HTTP Host header in requests sent to the Web UI. This could be exploited to...
PT-2025-6830
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.5.12+701324 WatchGuard Fireware OS versions 12.6 through 12.11 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting...
CVE-2022-31749
An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...
WatchGuard Fireware OS 安全漏洞
WatchGuard Fireware OS is a software from WatchGuard USA that runs on a Firebox. A security vulnerability exists in WatchGuard Fireware OS. An attacker could exploit the vulnerability to upload or read files to arbitrary locations on WatchGuard Firebox and XTM devices using unprivileged credentia...
CVE-2022-31749
WatchGuard Fireware OS (WatchGuard Firebox and XTM appliances) is affected by an authenticated remote, low-privilege command-injection in the diagnose and import pac commands prior to updates. The issue allows an attacker with unprivileged credentials to upload or read files to limited, arbitrary...
CVE-2022-31749 Authenticated arbitrary file read/write in WatchGuard Fireware OS
An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...
CVE-2022-31749 Authenticated arbitrary file read/write in WatchGuard Fireware OS
An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...
CVE-2024-5974
A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3...
CVE-2024-5974
A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3...
CVE-2024-5974 Firebox Authenticated Buffer Overflow Vulnerability
A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3...
CVE-2024-5974
CVE-2024-5974 describes a buffer overflow in WatchGuard Fireware OS that could allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on affected devices. Affected versions are Fireware OS 11.9.6 through 12.10.3 . The vulnerabilit...
CVE-2024-5974 Firebox Authenticated Buffer Overflow Vulnerability
A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3...
WatchGuard Fireware Security Vulnerabilities
WatchGuard Fireware is a firewall operating system from WatchGuard USA. The system supports intrusion protection, spam filtering, SSL VPN, and more. A security vulnerability exists in WatchGuard Fireware OS versions 11.9.4 through 12.5.12Update1 and 12.6 through 12.10.3, which stems from the...
PT-2024-37285 · Watchguard · Watchguard Fireware
Name of the Vulnerable Software and Affected Versions: WatchGuard Fireware OS versions 11.9.6 through 12.10.3 Description: A buffer overflow in WatchGuard Fireware OS could allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on...
WatchGuard XTM Firebox Unauthenticated Remote Command Execution Exploit
This Metasploit module exploits a buffer overflow at the administration interface 8080 or 4117 of WatchGuard Firebox and XTM appliances which is built from a cherrypy python backend sending XML-RPC requests to a C binary called wgagent using pre-authentication endpoint /agent/login. This...