🟢 Low ⏱ 5–15 min Last verified: 27 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vnc — authentication bypass vulnerability Upstream summary: RealVNC is susceptible to an authentication-bypass vulnerability. A malicious VNC client can cause a VNC server to allow it to connect without any […]
🟡 Medium ⏱ 10–30 min Last verified: 27 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: yamt — buffer overflow and directory traversal issues Related CVEs: CVE-2004-1302 CVE-2005-1846 CVE-2005-1847 Upstream summary: Stanislav Brabec discovered errors in yamt's path name handling that lead to buffer overflows and […]
🟠 High ⏱ 15–60 min Last verified: 26 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vlc heap-based buffer overflow Related CVEs: CVE-2007-3316 CVE-2007-3467 CVE-2007-3468 CVE-2008-5032 CVE-2008-5036 CVE-2010-2937 CVE-2012-1775 CVE-2012-1776 +12 more Upstream summary: Thomas Guillem reports: A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: devel/viewvc-devel is vulnerable to cross-site scripting Related CVEs: CVE-2023-22456 CVE-2023-22464 Upstream summary: C. Michael Pilato reports: security fix: escape revision view copy paths (#311) [CVE-2023-22464] security fix: escape revision view […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: clamav — multiple vulnerabilities Related CVEs: CVE-2019-12625 CVE-2019-12900 Upstream summary: Micah Snyder reports: An out of bounds write was possible within ClamAV&s NSIS bzip2 library when attempting decompression in cases […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pkg — vulnerability in libfetch Related CVEs: CVE-2013-6393 CVE-2020-7450 Upstream summary: A programming error allows an attacker who can specify a URL with a username and/or password components to overflow […]
🟠 High ⏱ 15–60 min Last verified: 26 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openvpn — Potential authentication by-pass with multiple deferred authentication plug-ins Related CVEs: CVE-2017-12166 CVE-2017-7478 CVE-2017-7479 CVE-2017-7508 CVE-2017-7512 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 +3 more Upstream summary: David Sommerseth reports: OpenVPN 2.1 until […]
🟠 High ⏱ 15–60 min Last verified: 26 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mc — multiple vulnerabilities Related CVEs: CVE-2003-1023 CVE-2004-0226 CVE-2004-0231 CVE-2004-0232 CVE-2004-0494 CVE-2004-1004 CVE-2004-1005 CVE-2004-1009 +4 more Upstream summary: Andrew V. Samoilov reported several vulnerabilities that were corrected in MidnightCommand 4.6.0: […]
🟢 Low ⏱ 5–15 min Last verified: 25 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pyrad — multiple vulnerabilities Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which […]
🟢 Low ⏱ 5–15 min Last verified: 25 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Calligra, KOffice — input validation failure Related CVEs: CVE-2012-3455 CVE-2012-3456 Upstream summary: KDE Security Advisory reports: A flaw has been found which can allow malicious code to take advantage of […]
