CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Prion•added 2019/09/25 4:15 p.m.•29 views

Code injection

pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.execphp call containing shell metacharacters in a parameter value...

9CVSS9AI score0.19614EPSS

SaveExploits4References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2019/09/25 12:00 a.m.•9 views

CVE-2019-16701: Improper Neutralization of Special Elements used in an OS Command

pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.execphp call containing shell metacharacters in a parameter value...

9CVSS7.9AI score0.19614EPSS

SaveExploits4References2

Positive Technologies•added 2019/09/25 12:00 a.m.•9 views

PT-2019-14777

Name of the Vulnerable Software and Affected Versions pfSense versions 2.3.4 through 2.4.4-p3 Description The issue allows for remote code injection via a methodCall XML document. This is achieved by using a pfsense.exec php call that contains shell metacharacters in a parameter value, such as...

9CVSS0.19614EPSS

SaveExploits4References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by