FreeBSD 14

🟡 Medium   ⏱ 10–30 min  Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: twiki — remote Perl code execution Related CVEs: CVE-2004-1037 CVE-2006-3336 CVE-2008-3195 CVE-2008-5304 CVE-2008-5305 CVE-2014-7236 Upstream summary: TWiki developers report: The debugenableplugins request parameter allows arbitrary Perl code execution. Using an […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: serendipity — multiple cross site scripting vulnerabilities Related CVEs: CVE-2008-1385 CVE-2008-1386 Upstream summary: Hanno Boeck reports: The installer of serendipity 1.3 has various Cross Site Scripting issues. This is considered […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: groovy — remote execution of untrusted code/DoS vulnerability Related CVEs: CVE-2015-3253 CVE-2016-6814 Upstream summary: The Apache Groovy project reports: When an application with Groovy on classpath uses standard Java serialization […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/ossec-hids-* — root escalation via syscheck feature Related CVEs: CVE-2014-5284 CVE-2015-3222 Upstream summary: OSSEC reports: The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gpgme — heap-based buffer overflow in gpgsm status handler Related CVEs: CVE-2014-3564 Upstream summary: Tomas Trnka reports: Gpgme contains a buffer overflow in the gpgsm status handler that could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libspf2 — Integer Underflow Remote Code Execution Related CVEs: CVE-2008-2469 CVE-2023-42118 Upstream summary: Trendmicro ZDI reports: Integer Underflow Remote Code Execution Vulnerability The specific flaw exists within the parsing of […]

🟠 High   ⏱ 15–60 min  Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-suds — vulnerable to symlink attacks Related CVEs: CVE-2013-2217 Upstream summary: SUSE reports: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dtc — multiple vulnerabilities Related CVEs: CVE-2011-0434 CVE-2011-0435 CVE-2011-0436 CVE-2011-0437 Upstream summary: Ansgar Burchardt reports: Ansgar Burchardt discovered several vulnerabilities in DTC, a web control panel for admin and accounting […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]