1153 matches found
CVE-2023-42326: Improper Neutralization of Special Elements used in a Command
An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfacesgifedit.php and interfacesgreedit.php components...
CVE-2023-42325: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the statuslogsfilterdynamic.php page...
CVE-2023-42327: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getserviceproviders.php page...
CVE-2023-42327
CVE-2023-42327 is a Cross-Site Scripting (XSS) vulnerability in Netgate pfSense v2.7.0 that allows an attacker to gain privileges by delivering a crafted URL to getserviceproviders.php. The NVD entry lists CVSS v3.1 base score 5.4 (Network, Low attack complexity, Privileges required: Low, User in...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
Default credentials
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
Pfsense CE Security Vulnerability
pfSense is a set of network firewalls based on FreeBSD Linux. A security vulnerability exists in Pfsense CE version 2.6.0 that originates from allowing an attacker to change any user's password without authentication...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29975
CVE-2023-29975 affects pfSense CE 2.6.0. The publicly documented description states that an attacker can change the password of any user without verification, indicating a credential-management flaw in the auth flow. No explicit root-cause, affected components, or versions beyond 2.6.0 are provid...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
PT-2023-22500
Name of the Vulnerable Software and Affected Versions Pfsense CE version 2.6.0 Description An issue in Pfsense CE allows attackers to change the password of any user without verification. Recommendations For Pfsense CE version 2.6.0, update to a newer version that contains a fix for this issue...
CVE-2023-29975: Improper Authentication
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29974
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
CVE-2023-29974
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
CVE-2023-29974
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
Design/Logic Flaw
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
Netgate pfSense CE Security Vulnerability
Netgate pfSense CE is a free and open source FreeBSD-based firewall and router software. A security vulnerability exists in Netgate pfSense CE version 2.6.0, which originated from a vulnerability that allows an attacker to compromise a user account via a weak password request...