🟡 Medium ⏱ 10–30 min Last verified: 13 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Related CVEs: CVE-2005-1992 CVE-2005-2337 CVE-2006-3694 CVE-2006-5467 CVE-2006-6303 CVE-2008-2726 Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]
🟠 High ⏱ 15–60 min Last verified: 13 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
🟠 High ⏱ 15–60 min Last verified: 13 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — potential SQL injection vulnerability Related CVEs: CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-0305 CVE-2013-0306 CVE-2013-1443 CVE-2013-1664 CVE-2013-1665 +12 more Upstream summary: MITRE CVE reports: Django 1.11 before 1.11.29, 2.2 before 2.2.11, […]
🟢 Low ⏱ 5–15 min Last verified: 12 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: password-store — GPG parsing vulnerabilities Related CVEs: CVE-2018-12356 Upstream summary: Jason A. Donenfeld reports: Markus Brinkmann discovered that [the] parsing of gpg command line output with regexes isn't anchored to […]
🟢 Low ⏱ 5–15 min Last verified: 12 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dragonfly — argument injection Related CVEs: CVE-2021-33564 Upstream summary: NVD reports: An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write […]
🟢 Low ⏱ 5–15 min Last verified: 10 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mnGoSearch buffer overflow in UdmDocToTextBuf() Upstream summary: Jedi/Sector One <[email protected]> reported the following on the full-disclosure list: Every document is stored in multiple parts according to its sections (description, body, […]
🟠 High ⏱ 15–60 min Last verified: 10 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OTRS — Multiple vulnerabilities Related CVEs: CVE-2010-0438 CVE-2010-2080 CVE-2010-4071 CVE-2011-1518 CVE-2011-2746 CVE-2012-2582 CVE-2012-4600 CVE-2012-4751 +12 more Upstream summary: OTRS reports: An attacker who is logged into OTRS as an agent […]
🟢 Low ⏱ 5–15 min Last verified: 10 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cfengine — arbitrary file overwriting vulnerability Related CVEs: CVE-2005-2960 Upstream summary: A Debian Security Advisory reports: Javier Fernández-Sanguino Peña discovered several insecure temporary file uses in cfengine, a tool for […]
