🟢 Low ⏱ 5–15 min Last verified: 20 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-dparse — REDoS vulnerability Related CVEs: CVE-2022-39280 Upstream summary: yeisonvargasf reports: dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is […]
🟡 Medium ⏱ 10–30 min Last verified: 20 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: znc — remote code execution vulnerability Related CVEs: CVE-2018-14055 CVE-2018-14056 CVE-2019-12816 CVE-2019-9917 CVE-2020-13775 CVE-2024-39844 Upstream summary: Mitre reports: In ZNC before 1.9.1, remote code execution can occur in modtcl via […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-foolscap — local file inclusion Upstream summary: Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who […]
Introduction This guide explains how to Deploy a Django App with Gunicorn on FreeBSD 14 on FreeBSD 14. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/py-requests — Information disclosure vulnerability Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which […]
🟡 Medium ⏱ 10–30 min Last verified: 18 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: piwigo — SQL injection Related CVEs: CVE-2013-1468 CVE-2013-1469 CVE-2020-8089 Upstream summary: Piwigo reports: Piwigo is affected by multiple SQL injection issues. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libmspack — frame_end overflow which could cause infinite loop Related CVEs: CVE-2014-9556 Upstream summary: There is a denial of service vulnerability in libmspack. The libmspack code is built into cabextract, […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OCaml — Multiple Security Vulnerabilities Related CVEs: CVE-2015-8869 Upstream summary: MITRE reports: OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bitcoin — Denial of Service and Possible Mining Inflation Related CVEs: CVE-2018-17144 Upstream summary: Bitcoin Core reports: CVE-2018-17144, a fix for which was released on September 18th in Bitcoin Core […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]
