Skip to content
Ipfire.org Ipfire vulnerabilities
-
ipfire
IPFire < v2.29 Command Injection via Proxy Report Creation
CVE-2025-34311
EPSS 13.5%
8.7 High
-
ipfire
IPFire < v2.29 Command Injection via URL Filter Blacklist
CVE-2025-34312
8.7 High
-
ipfire
IPFire < v2.29 SQL Injection via OpenVPN Connection Logs
CVE-2025-34304
7.1 High
-
ipfire
IPFire < v2.29 Stored XSS via Default Country Search
CVE-2025-34307
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Default IP Search Value
CVE-2025-34306
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Default Time Sync
CVE-2025-34308
5.1 Medium
-
ipfire project ipfire
IPFire < v2.29 Stored XSS via DNS Creation (proxy.cgi)
CVE-2025-34318
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via DNS Creation (dns.cgi)
CVE-2025-34317
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Dynamic DNS Host
CVE-2025-34309
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Location Group Creation
CVE-2025-34301
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Mail Server Settings
CVE-2025-34316
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Multiple Methods in cleanhtml()
CVE-2025-34305
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Quality of Service (QoS) Settings
CVE-2025-34310
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Remote Syslog Server Address
CVE-2025-34315
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Service Creation
CVE-2025-34302
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Time Constraint Rule URL Filter
CVE-2025-34314
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via User Quota Rule URL Filter
CVE-2025-34313
5.1 Medium
-
ipfire
IPFire < v2.29 Stored XSS via Whitelisted Host Creation
CVE-2025-34303
5.1 Medium