🟡 Medium ⏱ 10–30 min Last verified: 6 February 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cinder — unauthorized data access Related CVEs: CVE-2014-3641 CVE-2020-10755 CVE-2022-47951 Upstream summary: Utkarsh Gupta reports: An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance […]
🟢 Low ⏱ 5–15 min Last verified: 5 February 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Composer — Command injection vulnerability Related CVEs: CVE-2022-24828 Upstream summary: Composer developers reports: The Composer method VcsDriver::getFileContent() with user-controlled $file or $identifier arguments is susceptible to an argument injection vulnerability. […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpmyfaq — multiple vulnerabilities Related CVEs: CVE-2023-5863 CVE-2023-5865 Upstream summary: phpMyFAQ team reports: Stored cross-site scripting (XSS) and unauthenticated config backup download vulnerability Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 31 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-django-photologue — XSS vulnerability Related CVEs: CVE-2022-4526 Upstream summary: domiee13 reports: A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some […]
🟠 High ⏱ 15–60 min Last verified: 29 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: clamav — Possbile denial-of-service vulnerability Related CVEs: CVE-2022-20698 CVE-2022-20770 CVE-2022-20771 CVE-2022-20785 CVE-2022-20792 CVE-2022-20796 CVE-2022-20803 CVE-2023-20032 +8 more Upstream summary: The ClamAV project reports: A possible buffer overflow read bug is […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-WsgiDAV — XSS vulnerability Related CVEs: CVE-2022-41905 Upstream summary: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jellyfin — Multiple vulnerabilities Related CVEs: CVE-2023-30626 CVE-2023-30627 Upstream summary: [email protected] reports: Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a […]
🟡 Medium ⏱ 10–30 min Last verified: 22 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: git — Multiple vulnerabilities Related CVEs: CVE-2022-39253 CVE-2022-39260 CVE-2023-25652 CVE-2023-29007 Upstream summary: git developers reports: This update includes 2 security fixes: CVE-2023-25652: By feeding specially crafted input to `git apply […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Slixmpp — Lack of SSL Certificate hostname validation in XMLStream Related CVEs: CVE-2022-45197 Upstream summary: NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker […]
🟢 Low ⏱ 5–15 min Last verified: 16 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Configobj — Regular Expression Denial of Service attack Related CVEs: CVE-2023-26112 Upstream summary: [email protected] reports: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) […]
