Vulners
Lucene search
3 matches found
EUVD-2025-36507
IPFire versions prior to 2.29 Core Update 198 contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the 'nobody' user via the BENAME parameter when installing a blacklist. When a blacklist is installed the application issues an HTTP POST ...
8.7CVSS7.7AI score0.00423EPSS
Exploits0References4
CVE-2025-34312
IPFire versions prior to 2.29 Core Update 198 contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands as the 'nobody' user via the BENAME parameter when installing a blacklist. When a blacklist is installed the application issues an HTTP POST ...
8.8CVSS6.1AI score0.00423EPSS
Exploits0References3
CVE-2025-34312
IPFire
8.8CVSS7.8AI score0.00423EPSS
Exploits0References3Affected Software1
20