CVE-2023-48795

The SSH transport protocol, including OpenSSH (before 9.6), is vulnerable to the Terrapin attack (CVE-2023-48795). This vulnerability allows remote attackers to bypass integrity checks during the handshake phase by exploiting how the SSH Binary Packet Protocol (BPP) handles sequence numbers. The ...

CVE-2023-27100

The CVE affects Netgate pfSense Plus v22.05.1 and pfSense CE v2.6.0, where the SSHGuard anti-brute force protection can be bypassed via crafted web requests due to an improper restriction of excessive authentication attempts. Public details in connected documents confirm the affected versions and...

CVE-2024-54779

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to Cross Site Scripting (XSS) in the widgets/log.widget.php file. The root cause is a lack of security measures protecting the website structure, specifically involving the widgetkey variable , which cou...

CVE-2024-57273

Netgate pfSense CE (prior to 2.8.0 beta) and corresponding Plus builds are vulnerable to a Cross-site scripting (XSS) flaw in the Automatic Configuration Backup (ACB) service. The vulnerability is caused by an unsanitized "reason" field and a derivable device key generated from a public SSH key. ...

CVE-2022-24299

The CVE-2022-24299 issue affects pfSense CE (versions prior to 2.6.0) and pfSense Plus (prior to 22.01); it is an Improper Input Validation vulnerability that lets a privileged attacker who can modify OpenVPN client/server settings execute arbitrary commands. This is documented across multiple so...

CVE-2022-26019

The CVE-2022-26019 issue affects pfSense CE/Plus: pfSense CE before 2.6.0 and pfSense Plus before 22.01. The root cause is improper access control that lets a remote attacker with privilege to modify NTP GPS settings rewrite files on the filesystem, potentially enabling arbitrary command executio...

CVE-2021-20729

The CVE-2021-20729 entry concerns a Cross-site scripting (XSS) vulnerability in pfSense CE (versions <= 2.5.2) and pfSense Plus (versions

CVE-2023-48123

CVE-2023-48123 : An issue in Netgate pfSense Plus v.23.05.1 and earlier and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php file. The NVD and OSV entries describe it as a remote, unauthenticated code execution with network acce...

CVE-2024-54780

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget. The root cause is the improper sanitization of user-supplied input sent to the OpenVPN management interface. An authenticated attacker can exploit this by inje...

CVE-2023-42326

pfSense 2.7.0 contains a remote code execution flaw via crafted requests to interfaces_gif_edit.php and interfaces_gre_edit.php due to lack of input validation. The issue allows an authenticated attacker to execute arbitrary commands. PoCs/escalation tools exist (GitHub PoCs) and show command inj...