🟢 Low ⏱ 5–15 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Borg (Backup) — flaw in cryptographic authentication scheme in Borg allowed an attacker to fake archives and indirectly cause backup data loss. Related CVEs: CVE-2023-36811 Upstream summary: Thomas Waldmann reports: […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: electrum — JSONRPC vulnerability Related CVEs: CVE-2018-6353 Upstream summary: MITRE reports: JSONRPC vulnerability Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-slixmpp — incomplete SSL certificate validation Related CVEs: CVE-2019-1000021 CVE-2022-45197 Upstream summary: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ikiwiki — authentication bypass vulnerability Related CVEs: CVE-2008-0165 CVE-2008-0169 CVE-2008-0808 CVE-2009-2944 CVE-2011-1408 CVE-2016-10026 CVE-2016-4561 CVE-2016-9645 +2 more Upstream summary: ikiwiki reports: The ikiwiki maintainers discovered further flaws similar to CVE-2016-9646 […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: inn — plaintext command injection into encrypted channel Related CVEs: CVE-2011-0411 CVE-2012-3523 Upstream summary: INN developers report: Fixed a possible plaintext command injection during the negotiation of a TLS layer. […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache22 — chunk header parsing defect Related CVEs: CVE-2012-0833 CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 CVE-2013-1862 CVE-2013-1896 CVE-2013-5704 CVE-2013-6438 +5 more Upstream summary: Apache Foundation reports: CVE-2015-3183 core: Fix chunk header parsing defect. […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — use-after-free vulnerability Upstream summary: Symeon Paraschoudis reports: Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk() Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Libgit2 — Fixing insufficient validation of submodule names Related CVEs: CVE-2018-11235 Upstream summary: The Git community reports: Insufficient validation of submodule names Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libsamplerate — multiple vulnerabilities Related CVEs: CVE-2017-7697 Upstream summary: NVD reports: In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file. […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: froxlor — database password information leak Related CVEs: CVE-2015-5959 Upstream summary: [email protected] reports: An unauthenticated remote attacker is able to get the database password via webaccess due to wrong file […]
