🟠 High ⏱ 15–60 min Last verified: 19 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — XSS Related CVEs: CVE-2010-4257 CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 +12 more Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block […]
🟠 High ⏱ 15–60 min Last verified: 19 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Related CVEs: CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 CVE-2013-2203 +12 more Upstream summary: wordpress developers reports: This security and maintenance release features 1 bug fix […]
🟠 High ⏱ 15–60 min Last verified: 19 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — DoS vulnerability in InnoDB Related CVEs: CVE-2018-25032 CVE-2019-17543 CVE-2020-14672 CVE-2020-14760 CVE-2020-14765 CVE-2020-14769 CVE-2020-14771 CVE-2020-14773 +12 more Upstream summary: MariaDB reports: Easily exploitable vulnerability allows high privileged attacker with […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ipython — Execution with Unnecessary Privileges Related CVEs: CVE-2022-21699 Upstream summary: IPython project reports: IPython 8.0.1, 7.31.1 and 5.11 are security releases that change some default values in order to […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pygments — shell injection vulnerability Related CVEs: CVE-2015-8557 Upstream summary: NVD reports: The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mail/trojita — may leak mail contents (not user credentials) over unencrypted connection Related CVEs: CVE-2014-2567 Upstream summary: Jan Kundrát reports: An SSL stripping vulnerability was discovered in Trojitá, a fast […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]
🔴 Critical ⏱ 5–30 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
