🟢 Low ⏱ 5–15 min Last verified: 8 July 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: curl — SOCKS5 heap buffer overflow Related CVEs: CVE-2023-38545 Upstream summary: The curl team reports: This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When […]
🟢 Low ⏱ 5–15 min Last verified: 27 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: icinga2 — TLS Certificate Validation Bypass Related CVEs: CVE-2014-2386 CVE-2024-49369 Upstream summary: The Icinga project reports: Icinga is a monitoring system which checks the availability of network resources, notifies users […]
🟠 High ⏱ 15–60 min Last verified: 23 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 CVE-2024-31208 +7 more Upstream summary: element-hq/synapse developers report: A malicious server can […]
🟢 Low ⏱ 5–15 min Last verified: 21 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Spreadsheet-ParseExcel — Remote Code Execution Vulnerability Related CVEs: CVE-2023-7101 Upstream summary: Spreadsheet-ParseExcel reports: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an […]
🟡 Medium ⏱ 10–30 min Last verified: 18 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: routinator — Possible path traversal when storing RRDP responses Related CVEs: CVE-2021-43172 CVE-2021-43173 CVE-2021-43174 CVE-2022-3029 CVE-2022-39915 CVE-2022-39916 CVE-2023-39916 Upstream summary: [email protected] reports: NLnet Labs Routinator 0.9.0 up to and including […]
🟡 Medium ⏱ 10–30 min Last verified: 17 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenSSL — Multiple vulnerabilities Related CVEs: CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 Upstream summary: The OpenSSL project reports: Severity: low Applications that use a non-default option when verifying certificates may be vulnerable to […]
🟡 Medium ⏱ 10–30 min Last verified: 15 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vorbistools — heap buffer overflow in oggenc Related CVEs: CVE-2008-1686 CVE-2014-9638 CVE-2014-9639 CVE-2015-6749 CVE-2023-43361 Upstream summary: Frank-Z7 reports: Heap buffer overflow when vorbis-tools/oggenc converts WAV files to Ogg files. Table […]
🟢 Low ⏱ 5–15 min Last verified: 12 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zabbix — SQL injection in user.get API Related CVEs: CVE-2024-42327 Upstream summary: [email protected] reports: A non-admin user account on the Zabbix frontend with the default User role, or with any […]
🟢 Low ⏱ 5–15 min Last verified: 12 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — PL/Perl environment variable changes execute arbitrary code Related CVEs: CVE-2024-10979 Upstream summary: PostgreSQL project reports: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user […]
🟡 Medium ⏱ 10–30 min Last verified: 12 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: netatalk3 — multiple WolfSSL vulnerabilities Related CVEs: CVE-2008-5718 CVE-2024-1544 CVE-2024-38439 CVE-2024-38440 CVE-2024-38441 CVE-2024-5288 CVE-2024-5814 CVE-2024-5991 Upstream summary: Netatalk release reports: WolfSSL 5.7.0 (included in netatalk) includes multiple security vulnerabilities. Table […]
