🟢 Low ⏱ 5–15 min Last verified: 18 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: evince and atril — command injection vulnerability in CBT handler Related CVEs: CVE-2006-5864 CVE-2017-1000083 Upstream summary: GNOME reports: The comic book backend in evince 3.24.0 (and earlier) is vulnerable to […]
🟠 High ⏱ 15–60 min Last verified: 18 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnupg — AEAD key import overflow Related CVEs: CVE-2003-0971 CVE-2005-0366 CVE-2006-0049 CVE-2006-0455 CVE-2006-3082 CVE-2006-6235 CVE-2008-1530 CVE-2013-4402 +5 more Upstream summary: Importing an OpenPGP key having a preference list for AEAD […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: a2ps — insecure temporary file creation Related CVEs: CVE-2004-1170 CVE-2004-1377 Upstream summary: A Secunia Security Advisory reports that Javier Fernández-Sanguino Peña has found temporary file creation vulnerabilities in the fixps […]
🟠 High ⏱ 15–60 min Last verified: 18 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: DNSSEC validators — denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilities Related CVEs: CVE-2003-0914 CVE-2005-0033 CVE-2005-0034 CVE-2006-4095 CVE-2006-4096 CVE-2009-0696 CVE-2011-1910 CVE-2011-2464 +12 more Upstream summary: Simon Kelley reports: If DNSSEC validation […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: RabbitMQ — Denial of Service via improper input validation Related CVEs: CVE-2015-0862 CVE-2016-9877 CVE-2021-22116 Upstream summary: Jonathon Knudsen of Synopsys Cybersecurity Research Center reports: All versions prior to 3.8.16 are […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-suds — vulnerable to symlink attacks Related CVEs: CVE-2013-2217 Upstream summary: SUSE reports: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: typo3 — XSS vulnerability in svg-sanitize Related CVEs: CVE-2020-11063 CVE-2020-11064 CVE-2020-11065 CVE-2020-11066 CVE-2020-11067 CVE-2020-11069 CVE-2020-15098 CVE-2020-15099 +1 more Upstream summary: The TYPO3 project reports: The SVG sanitizer library enshrined/svg-sanitize before […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cups-lpr — lppasswd multiple vulnerabilities Related CVEs: CVE-2004-1268 CVE-2004-1269 CVE-2004-1270 Upstream summary: D. J. Bernstein reports that Bartlomiej Sieka has discovered several security vulnerabilities in lppasswd, which is part of […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: drm graphics drivers — potential information disclusure via local access Related CVEs: CVE-2019-0154 CVE-2019-11112 CVE-2019-14615 Upstream summary: Intel reports: .A potential security vulnerability in Intel(R) Processor Graphics may allow information […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcpd — Denial of Service Related CVEs: CVE-2010-3611 CVE-2011-0413 CVE-2011-2748 CVE-2011-2749 CVE-2011-4539 CVE-2012-3570 CVE-2012-3571 CVE-2012-3954 +1 more Upstream summary: ISC reports: A badly formed packet with an invalid IPv4 UDP […]
