🟢 Low ⏱ 5–15 min Last verified: 17 November 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/openvpn-auth-ldap — Fix buffer overflow in challenge/response Related CVEs: CVE-2024-28820 Upstream summary: Graham Northup reports: A buffer overflow in extract_openvpn_cr allows attackers with a valid LDAP username and who can […]
🟠 High ⏱ 15–60 min Last verified: 6 October 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenSSL — OOB memory access vulnerability Related CVEs: CVE-2021-4160 CVE-2022-0778 CVE-2022-1292 CVE-2022-1343 CVE-2022-1434 CVE-2022-1473 CVE-2022-2068 CVE-2022-4203 +12 more Upstream summary: The OpenSSL project reports: Low-level invalid GF(2^m) parameters lead to […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zabbix — SQL injection in user.get API Related CVEs: CVE-2024-42327 Upstream summary: [email protected] reports: A non-admin user account on the Zabbix frontend with the default User role, or with any […]
🟢 Low ⏱ 5–15 min Last verified: 25 August 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — PL/Perl environment variable changes execute arbitrary code Related CVEs: CVE-2024-10979 Upstream summary: PostgreSQL project reports: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user […]
🟠 High ⏱ 15–60 min Last verified: 23 August 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gstreamer1 — multiple vulnerabilities Related CVEs: CVE-2024-47537 CVE-2024-47539 CVE-2024-47540 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 +12 more Upstream summary: The GStreamer project reports multiple security vulnerabilities fixed in the 1.28.3 release: […]
🟢 Low ⏱ 5–15 min Last verified: 14 August 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zabbix — SQL injection in user.get API Related CVEs: CVE-2024-42327 Upstream summary: [email protected] reports: A non-admin user account on the Zabbix frontend with the default User role, or with any […]
🟡 Medium ⏱ 10–30 min Last verified: 2 August 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: typo3-{11,12} — multiple vulnerabilities Related CVEs: CVE-2023-30451 CVE-2023-47125 CVE-2023-47126 CVE-2023-47127 CVE-2024-22188 CVE-2024-25118 CVE-2024-25119 CVE-2024-25120 +1 more Upstream summary: Typo3 developers reports: All versions are security releases and contain important security […]
🟠 High ⏱ 15–60 min Last verified: 31 July 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenSSL — OOB memory access vulnerability Related CVEs: CVE-2023-5678 CVE-2023-6129 CVE-2023-6237 CVE-2024-0727 CVE-2024-2511 CVE-2024-4603 CVE-2024-4741 CVE-2024-5535 +2 more Upstream summary: The OpenSSL project reports: Low-level invalid GF(2^m) parameters lead to […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: putty — multiple security vulnerabilities Related CVEs: CVE-2020-14002 CVE-2023-48795 CVE-2024-31497 Upstream summary: Simon Tatham reports: These features are new in PuTTY 0.84: Security issue: fixed a remotely triggerable double-free in […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: net/krill — DoS vulnerability Related CVEs: CVE-2023-0158 Upstream summary: MITRE reports: NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the "/rrdp" […]
