🟢 Low ⏱ 5–15 min Last verified: 3 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vieb — Remote Code Execution via Visiting Untrusted URLs Upstream summary: Zhengyu Liu, Jianjia Yu, Jelmer van Arnhem report: We discovered a remote code execution (RCE) vulnerability in the latest […]
🟢 Low ⏱ 5–15 min Last verified: 3 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tmux — stack overflow in CSI parsing Upstream summary: Nicholas Marriott reports: tmux has a stack overflow in CSI parsing. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 2 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: proxychains-ng — current path as the first directory for the library search path Related CVEs: CVE-2015-3887 Upstream summary: Mamoru TASAKA reports: proxychains4 sets LD_PRELOAD to dlopen libproxychains4.so and execvp() the […]
🟡 Medium ⏱ 10–30 min Last verified: 1 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — Enforce the reader to run in constant memory Related CVEs: CVE-2013-2877 CVE-2014-0191 CVE-2014-3660 CVE-2015-1819 Upstream summary: Daniel Veilland reports: Enforce the reader to run in constant memory. One […]
🟡 Medium ⏱ 10–30 min Last verified: 1 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libvncserver — multiple buffer overflows Related CVEs: CVE-2014-6051 CVE-2014-6052 CVE-2014-6053 CVE-2014-6054 CVE-2014-6055 CVE-2016-9941 CVE-2016-9942 Upstream summary: libvnc server reports: Two unrelated buffer overflows can be used by a malicious server […]
🟢 Low ⏱ 5–15 min Last verified: 1 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bacula — Console ACL Bypass Related CVEs: CVE-2012-4430 Upstream summary: A security issue has been reported in Bacula, which can be exploited by malicious users to bypass certain security restrictions. […]
🟢 Low ⏱ 5–15 min Last verified: 1 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-sqlalchemy12 — multiple SQL Injection vulnerabilities Related CVEs: CVE-2019-7164 CVE-2019-7548 Upstream summary: 21k reports: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. nosecurity reports: […]
🟠 High ⏱ 15–60 min Last verified: 30 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kauth: Local privilege escalation Related CVEs: CVE-2004-0411 CVE-2004-0689 CVE-2004-0690 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0746 CVE-2004-1156 +12 more Upstream summary: Albert Astals Cid reports: KAuth contains a logic flaw in which the […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpldapadmin — XSS vulnerability Related CVEs: CVE-2020-35132 Upstream summary: [email protected] reports: An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenLDAP — incorrect handling of NULL in certificate Common Name Related CVEs: CVE-2009-3767 Upstream summary: Jan Lieskovsky reports: OpenLDAP does not properly handle a '\0' character in a domain name […]
