Lucene search

Pfsense Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2019-12585

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcupsd_status.php.

9.8CVSS

9.6AI Score

0.005EPSS

2019-06-03 03:29 AM

cve

CVE-2019-16915

An issue was discovered in pfSense through 2.4.4-p3. widgets/widgets/picture.widget.php uses the widgetkey parameter directly without sanitization (e.g., a basename call) for a pathname to file_get_contents or file_put_contents.

9.8CVSS

9.3AI Score

0.004EPSS

2019-09-26 06:15 PM

104

cve

CVE-2020-21487

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acme_certificates.php.

9.6CVSS

9.1AI Score

0.002EPSS

2023-04-04 03:15 PM