Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
NetgatePfsense

8 matches found

CVE
CVE•added 2015/04/10 3:0 p.m.•63 views

CVE-2015-2295

Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter.

6.8CVSS7.1AI score0.37753EPSS
CVE
CVE•added 2015/04/01 2:59 p.m.•62 views

CVE-2015-2294

Multiple cross-site scripting (XSS) vulnerabilities in the WebGUI in pfSense before 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) zone parameter to status_captiveportal.php; (2) if or (3) dragtable parameter to firewall_rules.php; (4) queue parameter in an add acti...

4.3CVSS5.6AI score0.013EPSS
CVE
CVE•added 2015/02/27 3:59 p.m.•53 views

CVE-2015-1414

Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10. 10.0 before p18, and 10.1 before p6 allows remote attackers to cause a denial of service (crash) via a crafted IGMP packet, which triggers an incorrect size calculation and allocation of insufficient memory.

7.8CVSS6.2AI score0.02235EPSS
CVE
CVE•added 2015/08/18 3:59 p.m.•49 views

CVE-2015-6508

Cross-site scripting (XSS) vulnerability in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the descr parameter in a "new" action to system_authservers.php.

4.3CVSS6.5AI score0.01297EPSS
CVE
CVE•added 2015/08/18 3:59 p.m.•40 views

CVE-2015-4029

Cross-site scripting (XSS) vulnerability in the WebGUI in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the zone parameter in a del action to services_captiveportal_zones.php.

4.3CVSS6.5AI score0.01297EPSS
CVE
CVE•added 2015/08/18 3:59 p.m.•40 views

CVE-2015-6510

Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) srctrack, (2) use_mfs_tmp_size, or (3) use_mfs_var_size parameter to system_advanced_misc.php; the (4) port, (5) snaplen, or (6) count parameter to d...

4.3CVSS6.7AI score0.00087EPSS
CVE
CVE•added 2015/08/18 3:59 p.m.•35 views

CVE-2015-6509

Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) proxypass parameter to system_advanced_misc.php; (2) adaptiveend, (3) adaptivestart, (4) maximumstates, (5) maximumtableentries, or (6) aliasesresolv...

4.3CVSS6.7AI score0.00087EPSS
CVE
CVE•added 2015/08/18 3:59 p.m.•32 views

CVE-2015-6511

Cross-site scripting (XSS) vulnerability in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the server[] parameter to services_ntpd.php.

4.3CVSS6.5AI score0.00087EPSS