← Back

Arp Guard

arp-guard

Vendor: Isl • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-39575
1Isl
1Arp Guard
Jun 17, 2026
Sep 20, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A reflected cross-site scripting (XSS) vulnerability in the url_str URL parameter of ISL ARP Guard v4.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVE-2019-18663
1Isl
1Arp Guard
Jun 17, 2026
Nov 4, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows unauthenticated remote attackers to execute arbitrary SQL commands via the user_id parameter.