🟢 Low ⏱ 5–15 min Last verified: 25 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpMyAdmin — XSS vulnerability in drag-and-drop upload Related CVEs: CVE-2020-5504 Upstream summary: phpMyAdmin Team reports: PMASA-2023-1 XSS vulnerability in drag-and-drop upload Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 25 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Tomcat — Request Smuggling Related CVEs: CVE-2020-11996 CVE-2020-13934 CVE-2020-13935 CVE-2020-9484 CVE-2022-34305 CVE-2022-42252 Upstream summary: Apache Tomcat reports: If Tomcat was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2012-2126 CVE-2012-2125 CVE-2013-4363 CVE-2013-4287 Upstream summary: pkgsrc audit-packages flagged ruby1{8,9,93}-rubygems<1.8.23 for vulnerability class 'remote-spoofing'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2126 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-4407 Upstream summary: pkgsrc audit-packages flagged p5-HTTP-Body<1.23 for vulnerability class 'shell-escape'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2013-4407 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 24 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: librecad — out-of-bounds read in importshp plugin Related CVEs: CVE-2023-30259 Upstream summary: Albin Eldstål-Ahrens reports: An out-of-bounds read on a heap buffer in the importshp plugin may allow an attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 24 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: consul — rpc: authorize raft requests Related CVEs: CVE-2017-15133 CVE-2020-25864 CVE-2020-28053 CVE-2021-28156 CVE-2021-37219 Upstream summary: Hashicorp reports: HashiCorp Consul Raft RPC layer allows non-server agents with a valid certificate signed […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-35312 CVE-2024-35313 Upstream summary: pkgsrc audit-packages flagged arti<1.2.3 for vulnerability class 'input-validation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-35312 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-2851 Upstream summary: pkgsrc audit-packages flagged libotr<4.1.1 for vulnerability class 'remote-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2851 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 24 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenVPN — two remote denial-of-service vulnerabilities Related CVEs: CVE-2017-7478 CVE-2017-7479 Upstream summary: Samuli Seppänen reports: OpenVPN v2.4.0 was audited for security vulnerabilities independently by Quarkslabs (funded by OSTIF) and Cryptography […]
🟡 Medium ⏱ 10–30 min Last verified: 24 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libadplug — Various vulnerabilities Related CVEs: CVE-2019-14690 CVE-2019-14691 CVE-2019-14692 CVE-2019-14732 CVE-2019-14733 CVE-2019-14734 CVE-2019-15151 Upstream summary: Malvineous on Github reports: This release fixes the following security issues: buffer overflow in .bmf […]
