CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

Positive Technologies•added 2026/02/18 12:0 a.m.•4 views

PT-2026-20498

IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject malicious scripts through POST parameters. Attackers can submit crafted requests with script payloads in the MAX DISK USAGE or MAX DOWNLOAD RATE...

6.1CVSS5.6AI score0.00079EPSS

Exploits1References4

NVD•added 2021/07/12 4:15 p.m.•9 views

CVE-2020-19204

An authenticated Stored Cross-Site Scriptiong XSS vulnerability exists in Lightning Wire Labs IPFire 2.21 x8664 - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripti...

5.4CVSS0.00322EPSS

Exploits0References3

Cvelist•added 2021/07/12 3:22 p.m.•11 views

CVE-2020-19204

5.3AI score0.00322EPSS

Exploits0References3

CVE•added 2021/07/12 3:22 p.m.•41 views

CVE-2020-19204

The CVE-2020-19204 entry concerns Lightning Wire Labs IPFire 2.21 (x86_64) Core Update 130. Affected component: routing.cgi (Routing Table Entries) via the Remark/remark parameter. Root cause: an authenticated WebGUI user can trigger a Stored Cross-Site Scripting (XSS) in routing entries. Impact:...

5.4CVSS5.2AI score0.00322EPSS

Exploits0References3Affected Software1

NVD•added 2021/06/17 4:15 p.m.•7 views

CVE-2020-19202

An authenticated Stored XSS Cross-site Scripting exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" parameter in IPFire 2.21 x8664 - Core Update 130. It allows an authenticated WebGUI user with privileges to execute Stored Cross-site Scripting in the...

5.4CVSS0.00308EPSS

Exploits1References2