Ipfire.org Ipfire
18 CVEs affecting Ipfire.org Ipfire. Latest disclosed: 2025-10-28. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-34312 | High | 8.8 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands a… |
CVE-2025-34311 | High | 8.8 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands a… |
CVE-2025-34304 | Medium | 6.5 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used wh… |
CVE-2025-34317 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34316 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34315 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34314 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34313 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34310 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34309 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34308 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34307 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34306 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34305 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function… |
CVE-2025-34303 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34302 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34301 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34318 | | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |