Vulnerability index

Browse CVEs

11 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Freepbx HIGH 8.8
CVE-2024-58294

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to ex…

No fix yet
Fix from $1,950 2025-12-11
Freepbx HIGH 7.2
CVE-2024-53564

A vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded (valid FreePBX module) files, allowing high-privilege a…

Mitigation only
Fix from $1,950 2024-12-02
Freepbx Linux 7 HIGH 8.1
CVE-2023-26567

Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global varia…

Mitigation only
Fix from $1,950 2023-04-26
Switchvox MEDIUM 5.3
CVE-2021-45310

Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restrictio…

No fix yet
Fix from $1,600 2022-02-14
Restapps CRITICAL 9.8
CVE-2021-45461EPSS 20%

FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbit…

No fix yet
Fix from $2,300 2021-12-22
Session Border Controller Firmware CRITICAL 9.8
CVE-2019-12147

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username fi…

No fix yet
Fix from $2,300 2019-10-22
Session Border Controller Firmware CRITICAL 9.8
CVE-2019-12148

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerabi…

No fix yet
Fix from $2,300 2019-10-22
Freepbx HIGH 7.2
CVE-2018-6393

FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2) allow post-authentication SQL injection via the order parameter. NOTE: the vendor disput…

No fix yet
Fix from $1,950 2018-01-29
Netborder\/vega Session Firmware CRITICAL 9.8
CVE-2017-17430

Sangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote attackers to execute arbitrary commands via the web interface.

Mitigation only
Fix from $2,300 2017-12-07
Asterisk HIGH 7.5
CVE-2017-9358

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13…

Mitigation only
Fix from $1,950 2017-06-02
Wanpipe HIGH 10.0
CVE-2008-6598

Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to "bri restart logic."

No fix yet
Fix from $1,950 2009-04-03