Ipfire (Ipfire.org) - vulnerabilities (CVEs)

18 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-10-28. Vendor: Ipfire.org.

CVEs of Ipfire

CVE-2025-34318 - CVSS 5.1 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34317 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34313 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34316 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34309 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34312 - CVSS 8.8 (high), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands…
CVE-2025-34315 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34308 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34311 - CVSS 8.8 (high), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands…
CVE-2025-34314 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34310 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34303 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34306 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34302 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34305 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function…
CVE-2025-34301 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…
CVE-2025-34304 - CVSS 7.1 (high), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used…
CVE-2025-34307 - CVSS 5.4 (medium), 2025-10-28: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject…