🟢 Low ⏱ 5–15 min Last verified: 6 June 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pymatgen — regular expression denial of service Related CVEs: CVE-2022-42964 Upstream summary: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an […]
🟡 Medium ⏱ 10–30 min Last verified: 6 June 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 CVE-2020-15118 CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Composer — Command injection vulnerability Related CVEs: CVE-2022-24828 Upstream summary: Composer developers reports: The Composer method VcsDriver::getFileContent() with user-controlled $file or $identifier arguments is susceptible to an argument injection vulnerability. […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rainloop — cross-site-scripting (XSS) vulnerability Related CVEs: CVE-2022-29360 Upstream summary: Simon Scannell reports: The code vulnerability can be easily exploited by an attacker by sending a malicious email to a […]
🟢 Low ⏱ 5–15 min Last verified: 29 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2023-28879 Upstream summary: [email protected] reports: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential […]
Introduction Deploying configure jenkins pipelines on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base […]
Introduction Deploying install cassandra on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base + […]
🟡 Medium ⏱ 10–30 min Last verified: 22 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h2o — HTTP/2 Rapid Reset attack vulnerability Related CVEs: CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2021-43848 CVE-2023-30847 CVE-2023-44487 Upstream summary: Kazuo Okuhu reports: H2O is vulnerable to the HTTP/2 Rapid Reset attack. An […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A user with a […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rsyslog8 — heap buffer overflow on receiving TCP syslog Related CVEs: CVE-2014-3634 CVE-2022-24903 Upstream summary: Rainer Gerhards reports: Modules for TCP syslog reception have a heap buffer overflow when octet-counted […]
