405 matches found
CVE-2023-39002
A cross-site scripting XSS vulnerability in the act parameter of systemcertmanager.php in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Deciso OPNsense Command Injection Vulnerability
Deciso OPNsense is a FreeBSD-based open source firewall and routing software from Dutch company Deciso. A command injection vulnerability exists in OPNsense versions prior to 23.7, which stems from a command injection vulnerability in the component diagbackup.php. An attacker can exploit this...
CVE-2023-38999
A Cross-Site Request Forgery CSRF in the System Halt API /system/halt of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to cause a Denial of Service DoS via a crafted GET request...
CVE-2023-39006
The CVE-2023-39006 vulnerability affects OPNSense components, specifically the Crash Reporter (crash_reporter.php). Affected versions are Community Edition before 23.7 and Business Edition before 23.4.2, where input sanitization is mishandled. Concrete details across sources confirm the affected ...
CVE-2023-38998
CVE-2023-38998 describes an open redirect in the Login page of OPNSense Community Edition < 23.7 and Business Edition
CVE-2023-39000
A reflected cross-site scripting XSS vulnerability in the component /ui/diagnostics/log/core/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to inject arbitrary JavaScript via the URL path...
CVE-2023-39001
A command injection vulnerability in the component diagbackup.php of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary commands via a crafted backup configuration file...
CVE-2023-39003
OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permissions in the directory /tmp...
PT-2023-8202 · Opnsense · Opnsense
Name of the Vulnerable Software and Affected Versions: OPNsense Community Edition versions prior to 23.7 OPNsense Business Edition versions prior to 23.4.2 Description: A directory traversal vulnerability exists in the Captive Portal templates of OPNsense, allowing attackers to execute arbitrary...
Critical Ping Vulnerability Allows Remote Attackers to Take Over FreeBSD Systems
The maintainers of the FreeBSD operating system have released updates to remediate a security vulnerability impacting the ping module that could be potentially exploited to crash the program or trigger remote code execution. The issue, assigned the identifier CVE-2022-23093, impacts all supported...
OPNsense Cross-Site Scripting Vulnerability
OPNsense is an open source, FreeBSD-based firewall and routing software developed by Deciso Inc. A cross-site scripting vulnerability exists in versions prior to OPNsense 21.7.4. An attacker can exploit the vulnerability by returning LDAP attributes in the authentication tester to conduct...
CVE-2021-42770
A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...
CVE-2021-42770
A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...
Cross site scripting
A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...
CVE-2021-42770
A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...
CVE-2021-42770
CVE-2021-42770 affects OPNsense prior to 21.7.4. The vulnerability is a Cross-site Scripting (XSS) flaw that can be triggered via the LDAP attribute return in the authentication tester. Impact is limited to contexts that render the affected LDAP attribute data in a user’s browser; no exploitation...
CVE-2021-42770
A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...
Deciso OPNsense 跨站脚本漏洞
OPNsense is an open source, FreeBSD-based firewall and routing software developed by Deciso Inc. A cross-site scripting vulnerability exists in versions prior to OPNsense 21.7.4. An attacker can exploit the vulnerability by returning LDAP attributes in the authentication tester to conduct...