Vulnerabilities > Endian
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-02-15 | CVE-2021-27201 | OS Command Injection vulnerability in Endian Firewall Community 3.3.2 Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment. | 6.5 |
| 2012-09-15 | CVE-2012-4923 | Cross-Site Scripting vulnerability in Endian Firewall 2.4 Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule parameter to dansguardian.cgi, or (3) PATH_INFO to openvpn_users.cgi. | 4.3 |
| 2008-01-30 | CVE-2008-0494 | Cross-Site Scripting vulnerability in Endian Firewall 2.1.2 Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the psearch parameter. | 4.3 |