CVE-2026-27508 | Medium | 5.4 | 2026-03-30 | Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitat… |
CVE-2026-26352 | Medium | 5.4 | 2026-03-30 | Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanit… |
CVE-2019-25395 | High | 7.2 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attacker… |
CVE-2019-25394 | High | 7.2 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the modem.cgi script that allow attackers to i… |
CVE-2019-25393 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25392 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25390 | Medium | 5.4 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the interfaces.cgi script that allow attack… |
CVE-2019-25389 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25388 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25387 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25386 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dmzholes.cgi script that allow attacker… |
CVE-2019-25385 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by ma… |
CVE-2019-25384 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers… |
CVE-2019-25383 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the apcupsd.cgi script that allow attackers… |
CVE-2019-25382 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25381 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers t… |
CVE-2019-25380 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dhcp.cgi script that allow attackers to… |
CVE-2019-25379 | High | 7.2 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow att… |
CVE-2019-25378 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple cross-site scripting vulnerabilities in the proxy.cgi endpoint that allow attackers to inject… |
CVE-2011-1085 | High | 8.8 | 2020-02-07 | CSRF vulnerability in Smoothwall Express 3. |
CVE-2011-1084 | Medium | 6.1 | 2020-02-07 | A cross-site scripting (XSS) vulnerability in Smoothwall Express 3. |
CVE-2014-9431 | | | 2014-12-31 | Multiple cross-site request forgery (CSRF) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to hijack the authentication of adminis… |
CVE-2014-9430 | | | 2014-12-31 | Cross-site scripting (XSS) vulnerability in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall Express 3.0 SP3 allows remote attackers to inject arbitrary web s… |
CVE-2014-9429 | | | 2014-12-31 | Multiple cross-site scripting (XSS) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to inject arbitrary web script or HTML via the… |
CVE-2011-5284 | | | 2014-12-31 | Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier… |
CVE-2011-5283 | | | 2014-12-31 | Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows r… |
CVE-2009-0803 | | | 2009-03-04 | SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HT… |
CVE-2003-0209 | | | 2003-05-05 | Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence n… |