🟢 Low ⏱ 5–15 min Last verified: 15 September 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/openvpn-auth-ldap — Fix buffer overflow in challenge/response Related CVEs: CVE-2024-28820 Upstream summary: Graham Northup reports: A buffer overflow in extract_openvpn_cr allows attackers with a valid LDAP username and who can […]
🟡 Medium ⏱ 10–30 min Last verified: 12 September 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — libpq retains an error message from man-in-the-middle Related CVEs: CVE-2022-41862 CVE-2024-10977 CVE-2024-7348 Upstream summary: PostgreSQL project reports: Client use of server error message in PostgreSQL allows a server […]
🟠 High ⏱ 15–60 min Last verified: 28 August 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qt5-webengine — Use after free in Compositing Related CVEs: CVE-2023-5997 CVE-2023-6112 CVE-2023-6345 CVE-2023-6346 CVE-2023-6347 CVE-2023-6348 CVE-2023-6350 CVE-2023-6351 +12 more Upstream summary: Qt qtwebengine-chromium repo reports: Backports for 1 security bug […]
🟢 Low ⏱ 5–15 min Last verified: 21 August 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dendrite — Server-side request forgery vulnerability Related CVEs: CVE-2022-36009 CVE-2024-52594 Upstream summary: Dendrite team reports: This is a security release, gomatrixserverlib was vulnerable to server-side request forgery, serving content from […]
🟢 Low ⏱ 5–15 min Last verified: 19 August 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zabbix — SQL injection in user.get API Related CVEs: CVE-2024-42327 Upstream summary: [email protected] reports: A non-admin user account on the Zabbix frontend with the default User role, or with any […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: plasma[56]-plasma-workspace — Unauthorized users can access session manager Related CVEs: CVE-2024-36041 Upstream summary: David Edmundson reports: KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE based purely on the host, […]
🟡 Medium ⏱ 10–30 min Last verified: 22 July 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gogs — Multiple vulnerabilities Related CVEs: CVE-2022-1464 CVE-2024-39930 CVE-2024-39931 CVE-2024-39932 CVE-2024-39933 CVE-2024-44625 Upstream summary: [email protected] reports: CVE-2024-44625: Directory Traversal via the editFilePost function of internal/route/repo/editor.go. CVE-2024-39933: Gogs allows argument injection […]
🟢 Low ⏱ 5–15 min Last verified: 22 July 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: plasma[56]-plasma-workspace — Unauthorized users can access session manager Related CVEs: CVE-2024-36041 Upstream summary: David Edmundson reports: KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE based purely on the host, […]
🟠 High ⏱ 15–60 min Last verified: 18 July 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2019-19118 CVE-2020-13254 CVE-2020-13596 CVE-2020-24583 CVE-2020-24584 CVE-2020-7471 CVE-2020-9402 CVE-2021-31542 +12 more Upstream summary: Django reports: CVE-2023-41164: Potential denial of service vulnerability in django.utils.encoding.uri_to_iri(). Table of […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-redis — can send response data to the client of an unrelated request Related CVEs: CVE-2023-28858 CVE-2023-28859 Upstream summary: drago-balto reports: redis-py through 4.5.3 and 4.4.3 leaves a connection open […]
