Lucene search
+L

12 matches found

OSV
OSV
•added 2023/04/04 3:15 p.m.•46 views

CVE-2020-21487

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.6CVSS9.4AI score
SaveExploits0References2
Mend
Mend
•added 2023/04/04 12:00 a.m.•3 views

CVE-2020-21487

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.6CVSS0.00666EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/04 12:00 a.m.•4 views

CVE-2020-21487: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.6CVSS6.5AI score0.00666EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/04/04 12:00 a.m.•20 views

PT-2023-11591 · Pfsense +1 · Pfsense +1

Name of the Vulnerable Software and Affected Versions: pfSense version 2.4.4 ACME package version 0.6.3 Description: A Cross Site Scripting issue allows attackers to execute arbitrary code via the RootFolder field of "acme certificates.php". Recommendations: For pfSense version 2.4.4, update the...

9.6CVSS9.1AI score0.00666EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/04/04 12:00 a.m.•21 views

pfSense 跨站脚本漏洞

pfSense is a set of network firewalls based on FreeBSD Linux. A security vulnerability exists in Netgate pfSense version 2.4.4, ACME package v.0.6.3. An attacker can exploit this vulnerability to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.6CVSS8.9AI score0.00666EPSS
SaveExploits0References3
OSV
OSV
•added 2022/12/15 7:15 p.m.•28 views

CVE-2020-21219

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...

6.1CVSS6.3AI score
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/15 12:00 a.m.•18 views

Netgate pfSense CE 跨站脚本漏洞

Netgate pfSense CE is a free and open source FreeBSD-based firewall and router software. A security vulnerability exists in Netgate pf Sense version 2.4.4-Release-p3, Netgate ACME package version 0.6.3. An attacker can exploit this vulnerability to execute arbitrary code via the RootFolder field ...

6.1CVSS6.8AI score0.00626EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/15 12:00 a.m.•2 views

PT-2022-8638

Name of the Vulnerable Software and Affected Versions Netgate pfSense version 2.4.4-Release-p3 Netgate ACME package version 0.6.3 Description A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the RootFolder field to the "acme certificate edit.php" page of the ACME...

6.1CVSS0.00626EPSS
SaveExploits0References7
Mend
Mend
•added 2022/12/15 12:00 a.m.•2 views

CVE-2020-21219

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...

6.1CVSS0.00626EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/15 12:00 a.m.•12 views

CVE-2020-21219

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...

6.3AI score0.00626EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/15 12:00 a.m.•4 views

CVE-2020-21219: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...

6.1CVSS6.2AI score0.00626EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2007/03/02 9:18 p.m.•10 views

CVE-2007-1162

A certain ActiveX control in the Common Controls Replacement Project CCRP CCRP BrowseDialog Server ccrpbds6.dll allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 IsFolderAvailable or 2 RootFolder property value, different vectors than CVE-2007-0371...

7.8CVSS5.6AI score0.0322EPSS
SaveExploits4References5
Rows per page
Query Builder