🟢 Low ⏱ 5–15 min Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: darkhttpd — DOS vulnerability Related CVEs: CVE-2020-25691 Upstream summary: Mitre reports: flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of-service by accessing a file with […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: AccountsService — Insufficient path check in user_change_icon_file_authorized_cb() Related CVEs: CVE-2018-14036 Upstream summary: NVD reports: Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Drupal Views plugin — cross-site scripting Related CVEs: CVE-2010-4521 Upstream summary: Drupal security team reports: The Views module provides a flexible method for Drupal site designers to control how lists […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Multiple vulnerabilities Related CVEs: CVE-2020-15180 CVE-2020-2574 CVE-2021-46659 CVE-2021-46661 CVE-2021-46663 CVE-2021-46664 CVE-2021-46665 CVE-2021-46668 +12 more Upstream summary: The MariaDB project reports: MariaDB fixed 23 vulnerabilities across all supported versions […]
🟡 Medium ⏱ 10–30 min Last verified: 4 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]
🟠 High ⏱ 15–60 min Last verified: 4 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libssh — possible heap-buffer overflow vulnerability Related CVEs: CVE-2014-0017 CVE-2015-1782 CVE-2015-3146 CVE-2016-0739 CVE-2018-10933 CVE-2019-14889 CVE-2019-3855 CVE-2019-3856 +9 more Upstream summary: libssh security advisories: The SSH protocol keeps track of two […]
🟢 Low ⏱ 5–15 min Last verified: 4 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 4 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟡 Medium ⏱ 10–30 min Last verified: 3 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Composer — Multiple command injections via malicious git/hg branch names Related CVEs: CVE-2022-24828 CVE-2023-43655 CVE-2024-24821 CVE-2024-35241 CVE-2024-35242 Upstream summary: Composer project reports: The status, reinstall and remove commands with packages […]
🟢 Low ⏱ 5–15 min Last verified: 3 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kvirc — multiple vulnerabilities Related CVEs: CVE-2010-2451 CVE-2010-2452 Upstream summary: Two security vulnerabilities have been discovered: Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have […]
