🟢 Low ⏱ 5–15 min Last verified: 25 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: taglib — heap-based buffer over-read via a crafted audio file Related CVEs: CVE-2018-11439 Upstream summary: Webin security lab – dbapp security Ltd reports: The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib […]
🟢 Low ⏱ 5–15 min Last verified: 25 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: id Tech 3 — remote code execution vulnerability Related CVEs: CVE-2017-6903 Upstream summary: The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers […]
🟢 Low ⏱ 5–15 min Last verified: 25 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xshisen — local buffer overflows Related CVEs: CVE-2003-1053 CVE-2005-0117 Upstream summary: Steve Kemp has found buffer overflows in the handling of the command line flag -KCONV and the XSHISENLIB environment […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nexus2-oss — Apache ActiveMQ JMX vulnerability Related CVEs: CVE-2019-15893 CVE-2019-16530 CVE-2019-5475 CVE-2020-13920 CVE-2020-15012 Upstream summary: Sonatype reports: CVE-2020-13920: Apache ActiveMQ JMX is vulnerable to a MITM attack Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: radicale — multiple vulnerabilities Related CVEs: CVE-2015-8747 CVE-2015-8748 Upstream summary: Radicale reports: The multifilesystem backend allows access to arbitrary files on all platforms. Prevent regex injection in rights management. Table […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sudo-rs — Authenticating user not recorded properly in timestamp Related CVEs: CVE-2025-64170 CVE-2025-64517 Upstream summary: Trifecta Tech Foundation reports: With Defaults targetpw (or Defaults rootpw) enabled, the password of the […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-ruby_parser — insecure tmp file usage Related CVEs: CVE-2013-0162 Upstream summary: Michael Scherer reports: This is a relatively minor tmp file usage issue. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 23 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]
🟡 Medium ⏱ 10–30 min Last verified: 23 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hlstats — multiple cross site scripting vulnerabilities Related CVEs: CVE-2006-4454 CVE-2006-6780 CVE-2006-6781 CVE-2007-2812 Upstream summary: Kefka reports multiple cross site scripting vulnerabilities within hlstats. The vulnerabilities are caused due to […]
