🟢 Low ⏱ 5–15 min Last verified: 2 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mustache – Possible Remote Code Execution Related CVEs: CVE-2022-0323 Upstream summary: huntr.dev reports: In Mustache.php v2.0.0 through v2.14.0, Sections tag can lead to arbitrary php code execution even if strict_callables […]
🟡 Medium ⏱ 10–30 min Last verified: 1 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cassandra3 — multiple vulnerabilities Related CVEs: CVE-2015-0225 CVE-2015-0886 CVE-2019-2684 CVE-2020-7238 CVE-2021-44521 CVE-2022-24823 CVE-2022-25857 CVE-2022-42003 +1 more Upstream summary: Cassandra tema reports: This release contains 6 security fixes including CVE-2022-24823: When […]
🟢 Low ⏱ 5–15 min Last verified: 1 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Slixmpp — Lack of SSL Certificate hostname validation in XMLStream Related CVEs: CVE-2022-45197 Upstream summary: NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker […]
🟠 High ⏱ 15–60 min Last verified: 23 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2018-16984 CVE-2019-11358 CVE-2019-12308 CVE-2019-12781 CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235 +12 more Upstream summary: Django reports: CVE-2023-31047: Potential bypass of validation when uploading multiple files using […]
🟢 Low ⏱ 5–15 min Last verified: 22 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-dparse — REDoS vulnerability Related CVEs: CVE-2022-39280 Upstream summary: yeisonvargasf reports: dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is […]
Introduction Deploying configure disk encryption with geli on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Configobj — Regular Expression Denial of Service attack Related CVEs: CVE-2023-26112 Upstream summary: [email protected] reports: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) […]
🟢 Low ⏱ 5–15 min Last verified: 15 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: QtNetwork — potential buffer overflow Related CVEs: CVE-2023-51714 Upstream summary: Andy Shaw reports: A potential integer overflow has been discovered in Qt's HTTP2 implementation. If the HTTP2 implementation receives more […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-django-photologue — XSS vulnerability Related CVEs: CVE-2022-4526 Upstream summary: domiee13 reports: A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xrdp — privilege escalation Related CVEs: CVE-2017-16927 CVE-2022-23613 Upstream summary: xrdp project reports: An integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which […]
