Vulnerabilities (CVE)

Filtered by vendor Free Subscribe
Total 7 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-24375 1 Free 3 Freebox Server, Freebox V5, Freebox V5 Firmware 2024-02-04 4.3 MEDIUM 6.5 MEDIUM
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.
CVE-2020-24374 1 Free 2 Freebox Hd, Freebox Hd Firmware 2024-02-04 6.8 MEDIUM 9.6 CRITICAL
A DNS rebinding vulnerability in Freebox v5 before 1.5.29.
CVE-2020-24373 1 Free 10 Freebox Delta, Freebox Delta Firmware, Freebox Mini and 7 more 2024-02-04 6.8 MEDIUM 8.8 HIGH
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.
CVE-2020-24377 1 Free 10 Freebox Delta, Freebox Delta Firmware, Freebox Mini and 7 more 2024-02-04 6.8 MEDIUM 9.6 CRITICAL
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.
CVE-2020-24376 1 Free 10 Freebox Delta, Freebox Delta Firmware, Freebox Mini and 7 more 2024-02-04 6.8 MEDIUM 9.6 CRITICAL
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.
CVE-2014-9405 1 Free 1 Freebox Os 2024-02-04 3.5 LOW 5.4 MEDIUM
A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.
CVE-2014-9382 1 Free 1 Freebox Os 2024-02-04 4.3 MEDIUM 6.5 MEDIUM
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation