Netgate

Pfsense Ce

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-54780

Exploit
  • EPSS 12.15%
  • Veröffentlicht 14.05.2025 00:00:00
  • Zuletzt bearbeitet 13.06.2025 13:03:51

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to the OpenVPN management interface. An authenticated attacke...

5.4

CVE-2024-54779

Exploit
  • EPSS 8.28%
  • Veröffentlicht 14.05.2025 00:00:00
  • Zuletzt bearbeitet 23.06.2025 14:51:38

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php.

5.4

CVE-2024-57273

Exploit
  • EPSS 1.24%
  • Veröffentlicht 14.05.2025 00:00:00
  • Zuletzt bearbeitet 05.07.2026 01:21:16

Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, allowing remote attackers to execute arbitrary JavaScript, delete backups,...

5.9

CVE-2023-48795

Medienbericht Exploit
  • EPSS 93.31%
  • Veröffentlicht 18.12.2023 16:15:10
  • Zuletzt bearbeitet 12.05.2026 11:16:15

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client a...