Vulnerabilities > Ipfire > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-06-09 | CVE-2021-33393 | Unspecified vulnerability in Ipfire lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. | 8.8 |
| 2018-10-17 | CVE-2018-16232 | OS Command Injection vulnerability in Ipfire An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. | 8.8 |
| 2017-06-19 | CVE-2017-9757 | OS Command Injection vulnerability in Ipfire IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. | 8.8 |