🟢 Low ⏱ 5–15 min Last verified: 9 March 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A user with a […]
🟢 Low ⏱ 5–15 min Last verified: 7 March 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cloud-init — sensitive data exposure in cloud-init logs Related CVEs: CVE-2023-1786 Upstream summary: [email protected] reports: Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could […]
🟢 Low ⏱ 5–15 min Last verified: 3 March 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: soft-serve — Remote code execution vulnerability Related CVEs: CVE-2024-41956 Upstream summary: soft-serve team reports: Arbitrary code execution by crafting git ssh requests It is possible for a user who can […]
🟢 Low ⏱ 5–15 min Last verified: 22 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gstreamer1-plugins-gdkpixbuf — NULL-pointer dereference Related CVEs: CVE-2024-47613 Upstream summary: The GStreamer Security Center reports: A NULL-pointer dereference in the gdk-pixbuf decoder that can cause crashes for certain input files. Table […]
🟢 Low ⏱ 5–15 min Last verified: 21 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — PL/Perl environment variable changes execute arbitrary code Related CVEs: CVE-2024-10979 Upstream summary: PostgreSQL project reports: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: devel/viewvc-devel is vulnerable to cross-site scripting Related CVEs: CVE-2023-22456 CVE-2023-22464 Upstream summary: C. Michael Pilato reports: security fix: escape revision view copy paths (#311) [CVE-2023-22464] security fix: escape revision view […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-time — ReDoS vulnerability Related CVEs: CVE-2023-28756 Upstream summary: ooooooo_q reports: The Time parser mishandles invalid strings that have specific characters. It causes an increase in execution time for parsing […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 CVE-2020-15118 CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A […]
🟢 Low ⏱ 5–15 min Last verified: 11 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: amavisd-new — multipart boundary confusion Related CVEs: CVE-2024-28054 Upstream summary: The Amavis project reports: Emails which consist of multiple parts (`Content-Type: multipart/*`) incorporate boundary information stating at which point one […]
🟡 Medium ⏱ 10–30 min Last verified: 3 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Libgit2 — multiple vulnerabilities Related CVEs: CVE-2018-10887 CVE-2018-10888 CVE-2018-11235 CVE-2018-17456 CVE-2024-24577 Upstream summary: Git community reports: A bug in git_revparse_single is fixed that could have caused the function to enter […]
