BSD

🟡 Medium   ⏱ 10–30 min  Last verified: 22 July 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gogs — Multiple vulnerabilities Related CVEs: CVE-2022-1464 CVE-2024-39930 CVE-2024-39931 CVE-2024-39932 CVE-2024-39933 CVE-2024-44625 Upstream summary: [email protected] reports: CVE-2024-44625: Directory Traversal via the editFilePost function of internal/route/repo/editor.go. CVE-2024-39933: Gogs allows argument injection […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-numpy — Missing return-value validation of the function PyArray_DescrNew Related CVEs: CVE-2021-41495 Upstream summary: Numpy reports: At most call-sites for PyArray_DescrNew, there are no validations of its return, but an […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fsplib — multiple vulnerabilities Related CVEs: CVE-2007-3961 CVE-2007-3962 Upstream summary: A Secunia Advisory reports: fsplib can be exploited to compromise an application using the library. A boundary error exists in […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Zabbix — Remote code execution Related CVEs: CVE-2017-2824 Upstream summary: mitre reports: An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libutp — remote denial of service or arbitrary code execution Related CVEs: CVE-2012-6129 Upstream summary: NVD reports: Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: plasma[56]-plasma-workspace — Unauthorized users can access session manager Related CVEs: CVE-2024-36041 Upstream summary: David Edmundson reports: KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE based purely on the host, […]

🟠 High   ⏱ 15–60 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL Server — execute arbitrary SQL code as DBA user Related CVEs: CVE-2017-15098 CVE-2017-15099 CVE-2018-1052 CVE-2018-1053 CVE-2018-1058 CVE-2018-10915 CVE-2018-10925 CVE-2018-16850  +8 more Upstream summary: The PostgreSQL project reports: Confine additional […]

🟠 High   ⏱ 15–60 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mplayer — vulnerability in STR files processor Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2005-1195 CVE-2006-0579 CVE-2006-1502 CVE-2006-6172 CVE-2007-1246  +8 more Upstream summary: Secunia reports: The vulnerability is caused due to a […]