🟡 Medium ⏱ 10–30 min Last verified: 28 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: NPM — Multiple vulnerabilities Related CVEs: CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 Upstream summary: NPM reports: Global node_modules Binary Overwrite Symlink reference outside of node_modules Arbitrary File Write Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 28 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: opera — moderately severe issue Upstream summary: Opera reports: Fixed a moderately severe issue, as reported by Attila Suszte. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 28 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PHP — Multiple vulnerabilities in EXIF module Related CVEs: CVE-2019-11034 CVE-2019-11035 Upstream summary: The PHP project reports: Heap-buffer-overflow in php_ifd_get32s (CVE-2019-11034) Heap-buffer-overflow in exif_iif_add_value (CVE-2019-11035) Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 28 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2014-8111 Upstream summary: NIST reports: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers […]
🟢 Low ⏱ 5–15 min Last verified: 28 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nut — upsd can be remotely crashed Related CVEs: CVE-2012-2944 Upstream summary: Networkupstools project reports: NUT server (upsd), from versions 2.4.0 to 2.6.3, are exposed to crashes when receiving random […]
🟠 High ⏱ 15–60 min Last verified: 28 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
🟠 High ⏱ 15–60 min Last verified: 28 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache Tomcat — Multiple Vulnerabilities Related CVEs: CVE-2005-2090 CVE-2007-0450 CVE-2007-1355 CVE-2007-1358 CVE-2010-1157 CVE-2011-0013 CVE-2012-0022 CVE-2012-2733 +12 more Upstream summary: [email protected] reports: A race condition on connection close could trigger a […]
🟠 High ⏱ 15–60 min Last verified: 27 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: quagga — several security issues Related CVEs: CVE-2003-0858 CVE-2009-1572 CVE-2010-1674 CVE-2010-1675 CVE-2011-3323 CVE-2011-3324 CVE-2011-3325 CVE-2011-3326 +10 more Upstream summary: Quagga reports: The Quagga BGP daemon, bgpd, does not properly bounds […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: silc-client — Format string vulnerability Related CVEs: CVE-2009-3051 Upstream summary: SILC changelog reports: An unspecified format string vulnerability exists in silc-client. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nomad — multiple vulnerabilities Related CVEs: CVE-2020-27195 Upstream summary: The HashiCorp team reports: artifact: Fixed a bug where interpolation can be used in the artifact destination field to write artifact […]
