Browse CVEs

MEDIUM 6.1 CVE-2019-25374 OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting the passthrough… Opnsense No fix yet Fix from $1,6002026-02-15 MEDIUM 6.1 CVE-2019-25375 OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting… Opnsense No fix yet Fix from $1,6002026-02-15 MEDIUM 6.1 CVE-2019-25376 OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting… Opnsense No fix yet Fix from $1,6002026-02-15 MEDIUM 6.1 CVE-2019-25377 OPNsense 19.1 contains a reflected cross-site scripting vulnerability in the system_advanced_sysctl.php endpoint that allows attackers to inject mali… Opnsense No fix yet Fix from $1,6002026-02-15 MEDIUM 5.4 CVE-2019-25373 OPNsense 19.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting craf… Opnsense No fix yet Fix from $1,6002026-02-15 MEDIUM 6.1 CVE-2019-25370 OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input t… Opnsense No fix yet Fix from $1,6002026-02-15 MEDIUM 6.1 CVE-2019-25371 OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting… Opnsense No fix yet Fix from $1,6002026-02-15 MEDIUM 6.1 CVE-2019-25372 OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting… Opnsense No fix yet Fix from $1,6002026-02-15 MEDIUM 5.4 CVE-2019-25368 OPNsense 19.1 contains multiple cross-site scripting vulnerabilities in the diag_backup.php endpoint that allow attackers to inject malicious scripts… Opnsense No fix yet Fix from $1,6002026-02-15 MEDIUM 5.4 CVE-2019-25369 OPNsense 19.1 contains a stored cross-site scripting vulnerability in the system_advanced_sysctl.php endpoint that allows attackers to inject persist… Opnsense No fix yet Fix from $1,6002026-02-15 CRITICAL 9.8 CVE-2023-27152 DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to perform a brute-force attack to bypass authentication. Opnsense No fix yet Fix from $2,3002023-10-23