Lucene search
K

10 matches found

CVE
CVE
added 2025/10/30 9:45 p.m.13 views

CVE-2020-36869

Nagios XI

8.7CVSS7.5AI score0.01641EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-25898

Malicious code in bioql PyPI...

9.1CVSS6.5AI score0.07979EPSS
Exploits1References2
NVD
NVD
added 2025/08/27 3:15 p.m.5 views

CVE-2025-50989

OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint interfacesbridgeedit.php. The span POST parameter is concatenated into a system-level command without proper sanitization or escaping, allowing an administrator to inject arbitra...

9.1CVSS0.07979EPSS
Exploits1References2
OSV
OSV
added 2025/08/27 3:15 p.m.2 views

CVE-2025-50989

OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint interfacesbridgeedit.php. The span POST parameter is concatenated into a system-level command without proper sanitization or escaping, allowing an administrator to inject arbitra...

9.1CVSS8.7AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/27 12:0 a.m.5 views

CVE-2025-50989

OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint interfacesbridgeedit.php. The span POST parameter is concatenated into a system-level command without proper sanitization or escaping, allowing an administrator to inject arbitra...

9.1CVSS8.2AI score0.07979EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/10/12 12:0 a.m.5 views

PT-2024-7225 · Pfsense · Pfsense

Name of the Vulnerable Software and Affected Versions: pfsense version 2.5.2 Description: A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This...

9.3CVSS6.5AI score0.77891EPSS
Exploits3References45
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.4 views

NetBox 安全漏洞

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

6.1CVSS6.2AI score0.004EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2023/11/15 12:0 a.m.5 views

The vulnerability of the interfaces_gif_edit.php and interfaces_gre_edit.php components of the software network interface card based on the FreeBSD Netgate pfSense operating system allows a hacker to execute arbitrary commands.

The vulnerability of the interfacesgifedit.php and interfacesgreedit.php components of the software network interface layer based on the FreeBSD Netgate pfSense operating system exists due to the failure to implement measures to neutralize special elements. Exploiting this vulnerability allows a...

8.1CVSS8.2AI score0.64021EPSS
Exploits2References3Affected Software2
OSV
OSV
added 2023/11/14 5:15 a.m.3 views

CVE-2023-42326

An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfacesgifedit.php and interfacesgreedit.php components...

8.8CVSS6.1AI score0.64021EPSS
Exploits2References2
CNNVD
CNNVD
added 2023/01/26 12:0 a.m.4 views

YMFE YApi 跨站脚本漏洞

YMFE YApi is a visual interface management platform from YMFE Corporation. A security vulnerability exists in YMFE YApi version 1.9.1. An attacker can exploit this vulnerability to execute arbitrary code via the /interface/api edit page...

5.4CVSS6.3AI score0.0054EPSS
Exploits1References3
Rows per page
Query Builder