IIPFire.org

Products

Exploited and recent CVEs

• CVE-2025-34311 High 8.7 IPFire < v2.29 Command Injection via Proxy Report Creation 13.5%
• CVE-2025-34312 High 8.7 IPFire < v2.29 Command Injection via URL Filter Blacklist 2.2%
• CVE-2025-34304 High 7.1 IPFire < v2.29 SQL Injection via OpenVPN Connection Logs 0.4%
• CVE-2025-34307 Medium 5.1 IPFire < v2.29 Stored XSS via Default Country Search 0.5%
• CVE-2025-34306 Medium 5.1 IPFire < v2.29 Stored XSS via Default IP Search Value 0.5%
• CVE-2025-34308 Medium 5.1 IPFire < v2.29 Stored XSS via Default Time Sync 0.5%
• CVE-2025-34318 Medium 5.1 IPFire < v2.29 Stored XSS via DNS Creation (proxy.cgi) 0.5%
• CVE-2025-34317 Medium 5.1 IPFire < v2.29 Stored XSS via DNS Creation (dns.cgi) 0.5%
• CVE-2025-34309 Medium 5.1 IPFire < v2.29 Stored XSS via Dynamic DNS Host 5.3%
• CVE-2025-34301 Medium 5.1 IPFire < v2.29 Stored XSS via Location Group Creation 5.3%
• CVE-2025-34316 Medium 5.1 IPFire < v2.29 Stored XSS via Mail Server Settings 0.5%
• CVE-2025-34305 Medium 5.1 IPFire < v2.29 Stored XSS via Multiple Methods in cleanhtml() 0.5%
• CVE-2025-34310 Medium 5.1 IPFire < v2.29 Stored XSS via Quality of Service (QoS) Settings 0.5%
• CVE-2025-34315 Medium 5.1 IPFire < v2.29 Stored XSS via Remote Syslog Server Address 0.5%
• CVE-2025-34302 Medium 5.1 IPFire < v2.29 Stored XSS via Service Creation 0.5%
• CVE-2025-34314 Medium 5.1 IPFire < v2.29 Stored XSS via Time Constraint Rule URL Filter 0.5%
• CVE-2025-34313 Medium 5.1 IPFire < v2.29 Stored XSS via User Quota Rule URL Filter 0.5%
• CVE-2025-34303 Medium 5.1 IPFire < v2.29 Stored XSS via Whitelisted Host Creation 0.5%