217 matches found
CVE-2025-69690-CVE-2025-69691
🔐 CVE-2025-69690 および CVE-2025-69691 Netgate pfSense Community Edition における認証済みリモートコード実行 📋 概要 フィールド| 詳細 ---|--- 研究者| Nelson Adhepeau @privlabs ベンダー| Netgate 製品| pfSense Community Edition バージョン| 2.7.2 および 2.8.0 タイプ| 認証済みリモートコード実行 開示| 2026年2月 ベンダー通知日| 2025年12月2日 CVE 割り当て| 2026年1月28日 ⚠️ 免責事項...
pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...
CVE-2026-78902
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...
CVE-2026-78902
A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense 26.03.1-RELEASE . This flaw specifically affects the pfBlockerNG package , potentially allowing an attacker to achieve arbitrary code execution . No specific remediation or exploit details are provided in the documents.
CVE-2026-78849
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
EUVD-2026-71610
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
CVE-2026-78849
A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense Plus software (versions <= 26.03) and pfSense CE software (versions
CVE-2026-78849
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
CVE-2025-69691: Improper Access Control
Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.execphp. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally allowed to execute PHP code...
EUVD-2016-10864
NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...
CVE-2016-20057
NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...
CVE-2016-20058
CVE-2016-20058 affects Netgate AMITI Antivirus build 23.0.305, where an unquoted service path in the AmitiAvSrv and AmitiAntivirusHealth services allows a local attacker to escalate privileges. By placing a malicious executable in the unquoted path, triggering a service restart or system reboot e...
CVE-2016-20058 Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation
Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or...
CVE-2016-20057
Summary: CVE-2016-20057 affects NETGATE Registry Cleaner build 16.0.205, via an unquoted service path in the NGRegClnSrv service. This allows a local attacker to escalate privileges by placing a malicious executable in the unquoted path and triggering a service restart or system reboot to execute...
CVE-2016-20057 NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation
NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...
CVE-2016-20057 NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation
NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...
PT-2026-30354
Name of the Vulnerable Software and Affected Versions NETGATE Registry Cleaner version 16.0.205 Description The NGRegClnSrv service contains an unquoted service path, which occurs when a service path contains spaces and is not enclosed in quotation marks, allowing the operating system to...
CVE-2016-20057: Unquoted Search Path or Element
NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...
NETGATE Amiti Antivirus 代码问题漏洞
NETGATE Amiti Antivirus is a antivirus software developed by the Slovak company NETGATE. NETGATE Amiti Antivirus build 23.0.305 has a code vulnerability. This vulnerability stems from service paths in the AmitiAvSrv and AmitiAntivirusHealth services that are not properly quoted. This could allow...
NETGATE Spy Emergency 代码问题漏洞
NETGATE Spy Emergency is a Trojan virus detection and removal software developed by the Slovakian company NETGATE. There is a code vulnerability in NETGATE Spy Emergency build 23.0.205. This vulnerability stems from the fact that the SpyEmrgHealth and SpyEmrgSrv services use service paths without...