Browse CVEs

MEDIUM 6.4 CVE-2019-25399 IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to inject ma… Ipfire No fix yet Fix from $1,6002026-02-18 MEDIUM 6.1 CVE-2019-25398 IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject maliciou… Ipfire No fix yet Fix from $1,6002026-02-18 MEDIUM 5.4 CVE-2019-25400 IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers to inject… Ipfire No fix yet Fix from $1,6002026-02-18 MEDIUM 6.1 CVE-2019-25396 IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject m… Ipfire No fix yet Fix from $1,6002026-02-18 MEDIUM 6.1 CVE-2019-25397 IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to inject m… Ipfire No fix yet Fix from $1,6002026-02-18 MEDIUM 5.4 CVE-2025-50975 IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ru… Ipfire No fix yet Fix from $1,6002025-08-26 MEDIUM 6.1 CVE-2025-50976 IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME query param… Ipfire No fix yet Fix from $1,6002025-08-26 MEDIUM 6.5 CVE-2025-50974 The Calamaris log exporter CGI (/cgi-bin/logs.cgi/calamaris.dat) in IPFire 2.29 does not properly sanitize user-supplied input before incorporating p… Ipfire No fix yet Fix from $1,6002025-08-26 MEDIUM 5.4 CVE-2020-19202 An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" param… Ipfire No fix yet Fix from $1,6002021-06-17