929 matches found
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
Default credentials
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29975
CVE-2023-29975 affects pfSense CE 2.6.0. The publicly documented description states that an attacker can change the password of any user without verification, indicating a credential-management flaw in the auth flow. No explicit root-cause, affected components, or versions beyond 2.6.0 are provid...
Pfsense CE Security Vulnerability
pfSense is a set of network firewalls based on FreeBSD Linux. A security vulnerability exists in Pfsense CE version 2.6.0 that originates from allowing an attacker to change any user's password without authentication...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29975
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-29974
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
CVE-2023-29974
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
CVE-2023-29974
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
Design/Logic Flaw
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
CVE-2023-29974
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
PT-2023-22499 · Unknown · Pfsense Ce
Name of the Vulnerable Software and Affected Versions: Pfsense CE version 2.6.0 Description: An issue in Pfsense CE allows attackers to compromise user accounts due to weak password requirements. Recommendations: For Pfsense CE version 2.6.0, consider strengthening password requirements to preven...
Netgate pfSense CE Security Vulnerability
Netgate pfSense CE is a free and open source FreeBSD-based firewall and router software. A security vulnerability exists in Netgate pfSense CE version 2.6.0, which originated from a vulnerability that allows an attacker to compromise a user account via a weak password request...
CVE-2023-29974
CVE-2023-29974 affects pfSense CE 2.6.0. The linked documents describe a weakness in password requirements that can allow an attacker to compromise user accounts. The core issue is a weak password policy in the affected release; no technical details on the exact root cause, affected components, o...
CVE-2023-29974
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...
PT-2023-6863 · Netgate · Pfsense Ce +2
Name of the Vulnerable Software and Affected Versions: Netgate pfSense version 2.7.0 Netgate pfSense CE versions 2.7.0 and below Netgate pfSense Plus versions 23.05.1 and below Description: The issue is related to a Cross Site Scripting XSS vulnerability in the status logs filter dynamic.php...
PT-2023-6862 · Netgate · Pfsense
Name of the Vulnerable Software and Affected Versions: Netgate pfSense version 2.7.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability that allows a remote attacker to gain privileges via a crafted URL to the "getserviceproviders.php" page. This vulnerability is...
PT-2023-6864 · Netgate · Pfsense
Name of the Vulnerable Software and Affected Versions: Netgate pfSense version 2.7.0 Description: An issue in Netgate pfSense allows a remote attacker to execute arbitrary code via a crafted request to the interfaces gif edit.php and interfaces gre edit.php components. This is due to the lack of...