🟢 Low ⏱ 5–15 min Last verified: 22 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SnappyMail — multiple mXSS in HTML sanitizer Related CVEs: CVE-2024-45800 Upstream summary: Oskar reports: SnappyMail uses the `cleanHtml()` function to cleanup HTML and CSS in emails. Research discovered that the […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-httpie — exposure of sensitive information vulnerabilities Related CVEs: CVE-2022-0430 CVE-2022-24737 Upstream summary: Glyph reports: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help […]
🟡 Medium ⏱ 10–30 min Last verified: 22 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: oniguruma — multiple vulnerabilities Related CVEs: CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228 CVE-2019-13224 CVE-2019-13225 Upstream summary: A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, […]
🟠 High ⏱ 15–60 min Last verified: 22 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2015-3194 CVE-2016-0639 CVE-2016-0640 CVE-2016-0641 CVE-2016-0642 CVE-2016-0643 CVE-2016-0644 CVE-2016-0646 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 37 new security patches, plus […]
🟡 Medium ⏱ 10–30 min Last verified: 21 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postgresql — encoding based SQL injection Related CVEs: CVE-2005-0227 CVE-2005-0244 CVE-2005-0245 CVE-2005-0246 CVE-2005-0247 CVE-2006-2313 CVE-2006-2314 Upstream summary: The PostgreSQL development team reports: An attacker able to submit crafted strings to […]
🟠 High ⏱ 15–60 min Last verified: 21 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Nullpointer dereference Related CVEs: CVE-2018-25032 CVE-2019-1543 CVE-2019-1547 CVE-2019-15601 CVE-2019-17543 CVE-2019-2730 CVE-2019-2731 CVE-2019-2737 +12 more Upstream summary: The MariaDB project reports: MariaDB Server is vulnerable to Denial of Service. […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: uudeview buffer overflows Upstream summary: The authors of UUDeview report repairing two buffer overflows in their software. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 20 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache OpenOffice — master password vulnerabilities Related CVEs: CVE-2014-3575 CVE-2015-1774 CVE-2015-4551 CVE-2015-5212 CVE-2015-5213 CVE-2015-5214 CVE-2016-1513 CVE-2017-12607 +11 more Upstream summary: The Apache Openoffice project reports: Apache OpenOffice supports the storage […]
🟡 Medium ⏱ 10–30 min Last verified: 20 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: git — Multiple vulnerabilities Related CVEs: CVE-2022-39253 CVE-2022-39260 CVE-2023-25652 CVE-2023-29007 Upstream summary: git developers reports: This update includes 2 security fixes: CVE-2023-25652: By feeding specially crafted input to `git apply […]
🟡 Medium ⏱ 10–30 min Last verified: 20 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: win32-codecs — multiple vulnerabilities Related CVEs: CVE-2006-4381 CVE-2006-4382 CVE-2006-4384 CVE-2006-4385 CVE-2006-4386 CVE-2006-4388 CVE-2006-4389 Upstream summary: The Apple Security Team reports that there are multiple vulnerabilities within QuickTime (one of the […]
