CVE-2019-25400 | Medium | 5.4 | 2026-02-18 | IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers to inject malicious… |
CVE-2019-25399 | Medium | 6.4 | 2026-02-18 | IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to inject malicious sc… |
CVE-2019-25398 | Medium | 6.1 | 2026-02-18 | IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject malicious scripts… |
CVE-2019-25397 | Medium | 6.1 | 2026-02-18 | IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to inject malicious s… |
CVE-2019-25396 | Medium | 6.1 | 2026-02-18 | IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject malicious s… |
CVE-2025-34317 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34316 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34315 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34314 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34313 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34312 | High | 8.8 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands a… |
CVE-2025-34311 | High | 8.8 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands a… |
CVE-2025-34310 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34309 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34308 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34307 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34306 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34305 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function… |
CVE-2025-34304 | Medium | 6.5 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used wh… |
CVE-2025-34303 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34302 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34301 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-50975 | Medium | 5.4 | 2025-08-26 | IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark… |
CVE-2025-50976 | Medium | 6.1 | 2025-08-26 | IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters, res… |
CVE-2025-50974 | Medium | 6.5 | 2025-08-26 | The Calamaris log exporter CGI (/cgi-bin/logs.cgi/calamaris.dat) in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter v… |
CVE-2022-36368 | Medium | 4.8 | 2022-10-24 | Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with adm… |
CVE-2020-19204 | Medium | 5.4 | 2021-07-12 | An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Rou… |
CVE-2020-21142 | Medium | 6.1 | 2021-06-28 | Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi. |
CVE-2020-19202 | Medium | 5.4 | 2021-06-17 | An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" parameter in IP… |
CVE-2021-33393 | High | 8.8 | 2021-06-09 | lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged acco… |
CVE-2018-16232 | High | 8.8 | 2018-10-17 | An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. This allows an authenticated user with pr… |
CVE-2017-9757 | High | 8.8 | 2017-06-19 | IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited directly… |