🟢 Low ⏱ 5–15 min Last verified: 29 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2023-28879 Upstream summary: [email protected] reports: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential […]
🟠 High ⏱ 15–60 min Last verified: 20 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2019-19118 CVE-2020-13254 CVE-2020-13596 CVE-2020-24583 CVE-2020-24584 CVE-2020-7471 CVE-2020-9402 CVE-2021-31542 +12 more Upstream summary: Django reports: CVE-2023-41164: Potential denial of service vulnerability in django.utils.encoding.uri_to_iri(). Table of […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PuTTY and embedders (f.i., filezilla) — biased RNG with NIST P521/ecdsa-sha2-nistp521 signatures permits recovering private key Related CVEs: CVE-2024-31497 Upstream summary: Simon Tatham reports: ECDSA signatures using 521-bit keys (the […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gstreamer1-rtsp-server — Potential Denial-of-Service (DoS) with specially crafted client requests Related CVEs: CVE-2024-44331 Upstream summary: Qingpeng Du reports: A series of specially crafted client requests during streaming setup (post client […]
🟢 Low ⏱ 5–15 min Last verified: 14 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cloud-init — sensitive data exposure in cloud-init logs Related CVEs: CVE-2023-1786 Upstream summary: [email protected] reports: Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could […]
🟢 Low ⏱ 5–15 min Last verified: 12 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Borg (Backup) — flaw in cryptographic authentication scheme in Borg allowed an attacker to fake archives and indirectly cause backup data loss. Related CVEs: CVE-2023-36811 Upstream summary: Thomas Waldmann reports: […]
🟠 High ⏱ 15–60 min Last verified: 11 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mantis — multiple vulnerabilities Related CVEs: CVE-2018-16514 CVE-2019-15715 CVE-2019-8331 CVE-2020-25288 CVE-2020-25781 CVE-2020-25830 CVE-2020-28413 CVE-2020-35849 +7 more Upstream summary: Mantis 2.25.8 release reports: Security and maintenance release 0032432: Update guzzlehttp/psr7 to […]
🟡 Medium ⏱ 10–30 min Last verified: 7 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SoftEtherVPN — multiple vulnerabilities Related CVEs: CVE-2023-22325 CVE-2023-27395 CVE-2023-27516 CVE-2023-31192 CVE-2023-32275 CVE-2023-32634 Upstream summary: Daiyuu Nobori reports: The SoftEther VPN project received a high level code review and technical assistance […]
🟢 Low ⏱ 5–15 min Last verified: 6 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-uri — ReDoS vulnerability Related CVEs: CVE-2023-28755 Upstream summary: Dominic Couture reports: A ReDoS issue was discovered in the URI component. The URI parser mishandles invalid URLs that have specific […]
🟠 High ⏱ 15–60 min Last verified: 1 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: samba — multiple vulnerabilities Related CVEs: CVE-2004-0082 CVE-2004-0600 CVE-2004-0686 CVE-2004-0807 CVE-2004-0808 CVE-2004-0815 CVE-2004-0882 CVE-2004-0930 +12 more Upstream summary: The Samba Team reports: CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion […]
