FreeBSD 14

🟠 High   ⏱ 15–60 min  Last verified: 7 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL – Multiple vulnerabilities Related CVEs: CVE-2012-4414 CVE-2012-5611 CVE-2012-5612 CVE-2012-5615 CVE-2012-5627 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807  +8 more Upstream summary: Oracle reports: Critical Patch Update: MySQL Server, version(s) 5.5.45 and prior, 5.6.26 […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: swfdec — exposure of sensitive information Related CVEs: CVE-2008-1834 Upstream summary: Secunia reports: A vulnerability has been reported in swfdec, which can be exploited by malicious people to disclose sensitive […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rar — password prompt buffer overflow vulnerability Related CVEs: CVE-2007-0855 Upstream summary: iDefense reports: Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tnftpd — remotely exploitable vulnerability Related CVEs: CVE-2004-0794 Upstream summary: lukemftpd(8) is an enhanced BSD FTP server produced within the NetBSD project. The sources for lukemftpd are shipped with some […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mysql-scripts — mysqlaccess insecure temporary file creation Related CVEs: CVE-2004-0457 CVE-2005-0004 Upstream summary: The Debian Security Team reports: Javier Fernández-Sanguino Peña from the Debian Security Audit Project discovered a temporary […]

🟠 High   ⏱ 15–60 min  Last verified: 6 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cyrus-imapd — unbounded memory allocation Related CVEs: CVE-2002-1580 CVE-2004-1011 CVE-2004-1012 CVE-2004-1013 CVE-2005-0546 CVE-2009-2632 CVE-2015-8077 CVE-2015-8078  +5 more Upstream summary: Cyrus IMAP 3.8.3 Release Notes states: Fixed CVE-2024-34055: Cyrus-IMAP through 3.8.2 […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mahara — sql injection vulnerability Related CVEs: CVE-2010-0400 Upstream summary: The Debian security team reports: It was discovered that mahara, an electronic portfolio, weblog, and resume builder is not properly […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ldapscripts — Command Line User Credentials Disclosure Related CVEs: CVE-2007-5373 Upstream summary: Ganael Laplanche reports: Up to now, each ldap* command was called with the -w parameter, which allows to […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libqb — Buffer overflow Related CVEs: CVE-2023-39976 Upstream summary: [email protected] reports: log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not […]