🟡 Medium ⏱ 10–30 min Last verified: 8 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]
🟡 Medium ⏱ 10–30 min Last verified: 8 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ncurses — multiple issues Related CVEs: CVE-2017-13728 CVE-2017-13729 CVE-2017-13730 CVE-2017-13731 CVE-2017-13732 CVE-2017-13733 CVE-2017-13734 Upstream summary: ncurses developers reports: There are multiple illegal address access issues and an infinite loop issue. […]
🟢 Low ⏱ 5–15 min Last verified: 8 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kaminari — potential XSS vulnerability Related CVEs: CVE-2020-11082 Upstream summary: Kaminari Security Advisories: There was a vulnerability in versions of Kaminari that would allow an attacker to inject arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 8 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tinyproxy — ACL lists ineffective when range is configured Related CVEs: CVE-2011-1499 Upstream summary: When including a line to allow a network of IP addresses, the access to tinyproxy 56 […]
🟢 Low ⏱ 5–15 min Last verified: 7 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kdelibs — integer overflow in khtml Related CVEs: CVE-2006-4811 Upstream summary: Red Hat reports: An integer overflow flaw was found in the way Qt handled pixmap images. The KDE khtml […]
🟡 Medium ⏱ 10–30 min Last verified: 7 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qt4-imageformats, qt4-gui, qt5-gui — Multiple Vulnerabilities in Qt Image Format Handling Related CVEs: CVE-2015-0295 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 Upstream summary: Richard J. Moore reports: Due to two recent vulnerabilities identified in […]
🟢 Low ⏱ 5–15 min Last verified: 7 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libtool — Library Search Path Privilege Escalation Issue Related CVEs: CVE-2009-3736 Upstream summary: Secunia.com Do not attempt to load an unqualified module.la file from the current directory (by default) since […]
🟢 Low ⏱ 5–15 min Last verified: 7 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-httpx — input validation vulnerability Related CVEs: CVE-2021-41945 Upstream summary: lebr0nli reports: Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. […]
🟢 Low ⏱ 5–15 min Last verified: 7 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]
🟢 Low ⏱ 5–15 min Last verified: 6 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kdewebdev — kommander untrusted code execution vulnerability Related CVEs: CVE-2005-0754 Upstream summary: A KDE Security Advisory reports: Kommander executes without user confirmation data files from possibly untrusted locations. As they […]
