879 matches found
CVE-2023-42325
CVE-2023-42325 describes a Cross Site Scripting (XSS) flaw in Netgate pfSense v2.7.0 that can allow an authenticated admin to gain privileges via a crafted URL to status_logs_filter_dynamic.php. Public sources confirm affected versions include pfSense CE 2.7.0 and below, with patches released: pf...
Netgate pfSense CE Cross-Site Scripting Vulnerability
Netgate pfSense CE is a free and open source FreeBSD-based firewall and router software. A cross-site scripting vulnerability exists in Netgate pfSense CE version v.2.7.0, which originates from a vulnerability that allows remote attackers to gain privileges by accessing the getserviceproviders.ph...
CVE-2023-42325
Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the statuslogsfilterdynamic.php page...
CVE-2023-42326
An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfacesgifedit.php and interfacesgreedit.php components...
CVE-2023-42327
Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getserviceproviders.php page...
CVE-2023-42325
Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the statuslogsfilterdynamic.php page...
CVE-2023-42326
pfSense 2.7.0 contains a remote code execution flaw via crafted requests to interfaces_gif_edit.php and interfaces_gre_edit.php due to lack of input validation. The issue allows an authenticated attacker to execute arbitrary commands. PoCs/escalation tools exist (GitHub PoCs) and show command inj...
CVE-2023-42327
CVE-2023-42327 is a Cross-Site Scripting (XSS) vulnerability in Netgate pfSense v2.7.0 that allows an attacker to gain privileges by delivering a crafted URL to getserviceproviders.php. The NVD entry lists CVSS v3.1 base score 5.4 (Network, Low attack complexity, Privileges required: Low, User in...
pfSense Cross-Site Scripting Vulnerability
pfSense is a set of network firewalls based on FreeBSD Linux. A cross-site scripting vulnerability exists in Netgate pfSense version v.2.7.0 that originates from a vulnerability that allows remote attackers to gain privileges by accessing the statuslogsfilterdynamic.php page via a crafted URL...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
Default credentials
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
Pfsense CE Security Vulnerability
pfSense is a set of network firewalls based on FreeBSD Linux. A security vulnerability exists in Pfsense CE version 2.6.0 that originates from allowing an attacker to change any user's password without authentication...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29975
CVE-2023-29975 affects pfSense CE 2.6.0. The publicly documented description states that an attacker can change the password of any user without verification, indicating a credential-management flaw in the auth flow. No explicit root-cause, affected components, or versions beyond 2.6.0 are provid...
CVE-2023-29974
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...