FreeBSD 14

🟢 Low   ⏱ 5–15 min  Last verified: 27 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: eyeOS — multiple XSS security bugs Related CVEs: CVE-2006-5071 Upstream summary: eyeOS team reports: [EyeOS 0.9.1] release fixes two XSS security bugs, so we recommend all users to upgrade to […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tnftp — mget does not check for directory escapes Related CVEs: CVE-2004-1294 Upstream summary: When downloading a batch of files from an FTP server the mget command does not check […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: plasma[56]-plasma-workspace — Unauthorized users can access session manager Related CVEs: CVE-2024-36041 Upstream summary: David Edmundson reports: KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE based purely on the host, […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-beaker — arbitrary code execution vulnerability Related CVEs: CVE-2013-7489 Upstream summary: matheusbrat reports: The Beaker library through 1.12.1 for Python is affected by deserialization of untrusted data, which could lead […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: json-c — integer overflow and out-of-bounds write via a large JSON file Related CVEs: CVE-2020-12762 Upstream summary: Tobias Stöckmann reports: I have discovered a way to trigger an out of […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libcloud — possible SSL MITM due to invalid regexp used to validate target server hostname Related CVEs: CVE-2012-3446 Upstream summary: The libcloud development team reports: When establishing a secure (SSL […]

🟠 High   ⏱ 15–60 min  Last verified: 26 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: graphite2 — out-of-bounds write with malicious font Related CVEs: CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526 CVE-2016-1969 CVE-2016-1977 CVE-2016-2790 CVE-2016-2791  +12 more Upstream summary: Mozilla Foundation reports: An out-of-bounds write in the Graphite […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: KeePassX — information disclosure Related CVEs: CVE-2015-8378 Upstream summary: Yves-Alexis Perez reports: Starting an export (using File / Export to / KeepassX XML file) and cancelling it leads to KeepassX […]

🟠 High   ⏱ 15–60 min  Last verified: 26 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — multiple vulnerabilities Related CVEs: CVE-2015-3194 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836  +12 more Upstream summary: Oracle reports: Please reference CVE/URL list for details Not all listed CVE's […]