FreeBSD 14

🟠 High   ⏱ 15–60 min  Last verified: 5 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg-server — Multiple vulnerabilities Related CVEs: CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183  +12 more Upstream summary: The X.Org project reports: CVE-2023-6377/ZDI-CAN-22412/ZDI-CAN-22413: X.Org server: Out-of-bounds memory write in XKB […]

🟠 High   ⏱ 15–60 min  Last verified: 5 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading a […]

🟠 High   ⏱ 15–60 min  Last verified: 4 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 CVE-2024-31208  +7 more Upstream summary: element-hq/synapse developers report: A malicious server can […]

🟠 High   ⏱ 15–60 min  Last verified: 4 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Mozilla — Incorrect boundary conditions Related CVEs: CAN-2006-0884 CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0757 CVE-2004-0762 CVE-2004-0765 CVE-2004-0902  +12 more Upstream summary: https://bugzilla.mozilla.org/show_bug.cgi?id=2029301 reports: Incorrect boundary conditions in the Audio/Video: Playback component. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: phpList — SQL injection and XSS vulnerability Related CVEs: CVE-2009-0422 CVE-2012-2740 CVE-2012-2741 Upstream summary: Zero Science Lab reports: Input passed via the parameter 'sortby' is not properly sanitised before being […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: neon — NULL pointer dereference in Digest domain support Related CVEs: CVE-2004-0179 CVE-2004-0398 CVE-2008-3746 Upstream summary: Joe Orton reports: A NULL pointer deference in the Digest authentication support in neon […]