Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php

Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color

Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL

Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php

Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php

Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php

Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh

Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh

Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner

Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting

Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid

Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username

Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters

Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID

Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP

Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface

Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php

Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privil…

In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data handling allows an authenticated attacker to execute arbitra…

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.php

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php

pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php

pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record

Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability

Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting

Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting

Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure

Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting

Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting

Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure