🟢 Low ⏱ 5–15 min Last verified: 19 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: slixmpp — improper access control Related CVEs: CVE-2019-1000021 Upstream summary: NVD reports: slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: QtNetworkAuth — predictable seeding of PRNG in QAbstractOAuth Related CVEs: CVE-2024-36048 Upstream summary: Andy Shaw reports: The OAuth1 implementation in QtNetworkAuth created nonces using a PRNG that was seeded with […]
🟠 High ⏱ 15–60 min Last verified: 19 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mplayer — vulnerability in STR files processor Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2005-1195 CVE-2006-1502 CVE-2006-6172 CVE-2007-1246 CVE-2007-2948 +7 more Upstream summary: Secunia reports: The vulnerability is caused due to a […]
🟠 High ⏱ 15–60 min Last verified: 19 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: salt — multiple vulnerabilities Related CVEs: CVE-2019-17361 CVE-2020-11651 CVE-2020-11652 CVE-2020-16846 CVE-2020-17490 CVE-2020-25592 CVE-2020-28243 CVE-2020-28972 +8 more Upstream summary: SaltStack reports multiple security vulnerabilities in Salt CVE-2021-3197: The Salt-API.s SSH client […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mitmproxy — Insufficient Protection against HTTP Request Smuggling Related CVEs: CVE-2022-24766 Upstream summary: Zeyu Zhang reports: In mitmproxy 7.0.4 and below, a malicious client or server is able to perform […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: spotipy — CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Related CVEs: CVE-2025-66040 Upstream summary: https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-r77h-rpp9-w2xm reports: Spotipy is a Python library for the Spotify Web API. […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: smarty3 — shell injection in math Upstream summary: The smarty project reports: bugfix {math} shell injection vulnerability Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 18 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2009-3695 CVE-2010-3082 CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-0305 CVE-2013-0306 CVE-2013-1443 +6 more Upstream summary: The Django project reports: These releases address an unexpected code-execution issue, a […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-XML_RPC — remote PHP code injection vulnerability Related CVEs: CVE-2005-2498 Upstream summary: A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-caching — remote code execution or local privilege escalation vulnerabilities Related CVEs: CVE-2021-33026 Upstream summary: subnix reports: The Flask-Caching extension through 2.0.2 for Flask relies on Pickle for serialization, which […]
