Comodo Dome Firewall
Approved changes feed: RSS · Atom
cpe:2.3:a:comodo:comodo_dome_firewall:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Comodo (ae0f5a94-22c5-54dd-8ff5-a3476482174a) |
|---|---|
| Product | Comodo Dome Firewall (e79c9150-d7b4-5c55-96df-76a1d8867b7a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25430 |
vulnerable | 2026-06-08 05:13:42.348030 |
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via vpn_users
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the username parameter. Attackers can send POST requests to the vpn_users endpoint with script payloads in the username field to execute arbitrary JavaScript in victim browsers.
Published: 2026-02-19T12:02:44.636Z
Updated: 2026-05-24T01:36:49.285Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25429 |
vulnerable | 2026-06-08 05:13:42.347618 |
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via openvpn_advanced
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the openvpn_advanced endpoint. Attackers can inject JavaScript code through the GLOBAL_NETWORKS and GLOBAL_DNS parameters via POST requests to execute arbitrary scripts in users' browsers.
Published: 2026-02-19T12:02:43.707Z
Updated: 2026-05-24T01:36:48.643Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25428 |
vulnerable | 2026-06-08 05:13:42.347280 |
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via openvpn_users
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the openvpn_users endpoint that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted POST requests with script payloads in the username, remotenets, explicitroutes, static_ip, custom_dns, or custom_domain parameters to execute arbitrary JavaScript in users' browsers.
Published: 2026-02-19T12:02:42.885Z
Updated: 2026-05-24T01:36:47.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25427 |
vulnerable | 2026-06-08 05:13:42.346842 |
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via antispyware
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware endpoint. Attackers can send POST requests with JavaScript payloads in the DNSMASQ_WHITELIST or DNSMASQ_BLACKLIST parameters to execute arbitrary code in users' browsers.
Published: 2026-02-19T12:02:42.103Z
Updated: 2026-05-24T01:36:47.213Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25426 |
vulnerable | 2026-06-08 05:13:42.346353 |
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via dnsmasq
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq endpoint. Attackers can send POST requests with script payloads in the TRANSPARENT_SOURCE_BYPASS or TRANSPARENT_DESTINATION_BYPASS parameters to execute arbitrary JavaScript in users' browsers.
Published: 2026-02-19T12:02:41.346Z
Updated: 2026-05-24T01:36:46.540Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25425 |
vulnerable | 2026-06-08 05:13:42.345927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25424 |
vulnerable | 2026-06-08 05:13:42.345511 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25423 |
vulnerable | 2026-06-08 05:13:42.345174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25422 |
vulnerable | 2026-06-08 05:13:42.344835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25421 |
vulnerable | 2026-06-08 05:13:42.344493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25420 |
vulnerable | 2026-06-08 05:13:42.344063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25419 |
vulnerable | 2026-06-08 05:13:42.343711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25418 |
vulnerable | 2026-06-08 05:13:42.343292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25417 |
vulnerable | 2026-06-08 05:13:42.342844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25416 |
vulnerable | 2026-06-08 05:13:42.342378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25415 |
vulnerable | 2026-06-08 05:13:42.340507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25414 |
vulnerable | 2026-06-08 05:13:42.339978 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25413 |
vulnerable | 2026-06-08 05:13:42.339634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25412 |
vulnerable | 2026-06-08 05:13:42.339185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25411 |
vulnerable | 2026-06-08 05:13:42.338606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25410 |
vulnerable | 2026-06-08 05:13:42.338252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25409 |
vulnerable | 2026-06-08 05:13:42.335561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25408 |
vulnerable | 2026-06-08 05:13:42.335256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25407 |
vulnerable | 2026-06-08 05:13:42.334929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25406 |
vulnerable | 2026-06-08 05:13:42.334488 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25405 |
vulnerable | 2026-06-08 05:13:42.334004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25404 |
vulnerable | 2026-06-08 05:13:42.333632 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25403 |
vulnerable | 2026-06-08 05:13:42.332331 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25402 |
vulnerable | 2026-06-08 05:13:42.330857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.