🟡 Medium ⏱ 10–30 min Last verified: 29 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenSSL — multiple vulnerabilities Related CVEs: CVE-2016-7055 CVE-2016-8610 CVE-2017-3730 CVE-2017-3731 CVE-2017-3732 Upstream summary: The OpenSSL project reports: Truncated packet could crash via OOB read (CVE-2017-3731) Bad (EC)DHE parameters cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using mod_proxy in […]
🟢 Low ⏱ 5–15 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde-base — XSS: VCARD attachments vulnerability Related CVEs: CVE-2008-3823 CVE-2008-3824 Upstream summary: The Horde team reports: The major changes compared to Horde version 3.3.10 are: * Fixed XSS vulnerability when […]
🟢 Low ⏱ 5–15 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fidogate — write files as `news' user Upstream summary: Neils Heinen reports that the setuid `news' binaries installed as part of fidogate may be used to create files or append […]
🟠 High ⏱ 15–60 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2015-3194 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 +12 more Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.5 📖 ~4 min read • Source: OpenBSD 7.5 errata 015_wg Errata topic: Reliability: wg (All architectures) Issued: January 10, 2025 Upstream summary: Traffic sent over wg(4) could result in kernel crash. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 27 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2014-8111 Upstream summary: NIST reports: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read • Source: OpenBSD 7.4 errata 005_tmux Errata topic: Reliability: tmux (All architectures) Issued: November 21, 2023 Upstream summary: Overlong sequences of UTF-8 combining characters could crash tmux(1). Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 27 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ricochet — information disclosure Upstream summary: special reports: By sending a nickname with some HTML tags in a contact request, an attacker could cause Ricochet to make network requests without […]
🟢 Low ⏱ 5–15 min Last verified: 27 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lftp — multiple HTTP client download filename vulnerability Related CVEs: CVE-2003-0963 CVE-2010-2251 Upstream summary: The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a […]
