🟢 Low ⏱ 5–15 min Last verified: 26 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django-cms — XSS Vulnerability Upstream summary: Cross-site scripting (XSS) vulnerability Jonas Obrist reports: The security issue allows users with limited admin access to elevate their privileges through XSS injection using […]
🟠 High ⏱ 15–60 min Last verified: 26 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2021-22946 CVE-2021-3712 CVE-2022-1941 CVE-2022-2097 CVE-2022-21245 CVE-2022-21249 CVE-2022-21253 CVE-2022-21254 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 37 new security patches, plus […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sudosh — buffer overflow Upstream summary: ISS reports: sudosh2 and sudosh3 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the replay() function. By persuading a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: devel/ipython — multiple vulnerabilities Related CVEs: CVE-2015-4706 CVE-2015-4707 CVE-2015-5607 CVE-2015-6938 CVE-2015-7337 Upstream summary: Matthias Bussonnier reports: Summary: Local folder name was used in HTML templates without escaping, allowing XSS in […]
🟢 Low ⏱ 5–15 min Last verified: 24 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — multiple vulnerabilities Related CVEs: CVE-2019-5885 Upstream summary: Matrix developers report: The matrix team releases Synapse 1.2.1 as a critical security update. It contains patches relating to redactions and […]
🟡 Medium ⏱ 10–30 min Last verified: 24 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: piwik — XSS vulnerability Related CVEs: CVE-2009-4137 CVE-2010-1453 CVE-2010-2786 CVE-2015-7815 CVE-2015-7816 Upstream summary: Piwik reports: We have identified and fixed several XSS security issues in this release. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 24 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2015-8870 CVE-2016-5652 CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 CVE-2016-9536 CVE-2016-9537 CVE-2016-9540 Upstream summary: libtiff project reports: Multiple flaws have been discovered in libtiff library and utilities. Table […]
🟢 Low ⏱ 5–15 min Last verified: 24 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pygments — multiple DoS vulnerabilities Related CVEs: CVE-2021-20270 CVE-2021-27291 Upstream summary: Red Hat reports: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2016-6662 CVE-2016-9843 CVE-2017-10155 CVE-2017-10165 CVE-2017-10167 CVE-2017-10203 CVE-2017-10227 CVE-2017-10268 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]
🟡 Medium ⏱ 10–30 min Last verified: 23 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: privoxy — multiple vulnerabilities Related CVEs: CVE-2013-2503 CVE-2015-1030 CVE-2015-1031 CVE-2015-1201 CVE-2015-1380 CVE-2015-1381 CVE-2015-1382 CVE-2016-1982 +1 more Upstream summary: Privoxy Developers reports: Prevent invalid reads in case of corrupt chunk-encoded content. […]
