FreeBSD 14

🟠 High   ⏱ 15–60 min  Last verified: 22 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mediawiki — multiple vulnerabilities Related CVEs: CAN-2005-4501 CVE-2006-1498 CVE-2007-4828 CVE-2008-5249 CVE-2008-5250 CVE-2008-5252 CVE-2010-1150 CVE-2011-0047  +12 more Upstream summary: Mediawiki reports: (T355538, CVE-2024-PENDING) SECURITY: XSS in edit summary parser. (T357760, CVE-2024-PENDING) […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-httpx — input validation vulnerability Related CVEs: CVE-2021-41945 Upstream summary: lebr0nli reports: Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ngircd — format string vulnerability Related CVEs: CVE-2005-0199 CVE-2005-0226 Upstream summary: A No System Group security advisory reports that ngircd is vulnerable to a format string vulnerability in the Log_Resolver() […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ez-ipupdate — format string vulnerability Related CVEs: CVE-2004-0980 Upstream summary: Data supplied by a remote server is used as the format string instead of as parameters in a syslog() call. […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache httpd — denial of service in HTTP/2 Related CVEs: CVE-2016-8740 Upstream summary: mod_http2 reports: The Apache HTTPD web server (from 2.4.17-2.4.23) did not apply limitations on request headers correctly […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-dragonfly — arbitrary code execution Related CVEs: CVE-2013-1756 Upstream summary: Mark Evans reports: Unfortnately there is a security vulnerability in Dragonfly when used with Rails which would potentially allow an […]