🟢 Low ⏱ 5–15 min Last verified: 7 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: imwheel — insecure handling of PID file Upstream summary: A Computer Academic Underground advisory describes the consequences of imwheel's handling of the process ID file (PID file): imwheel exclusively uses […]
🟠 High ⏱ 15–60 min Last verified: 7 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2022-28346 CVE-2022-28347 CVE-2022-34265 CVE-2022-36359 CVE-2022-41323 CVE-2023-23969 CVE-2023-24580 CVE-2023-31047 +12 more Upstream summary: Django reports: CVE-2025-59681: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() […]
🟢 Low ⏱ 5–15 min Last verified: 7 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sqlite — Integer Truncation on SQLite Related CVEs: CVE-2024-0232 CVE-2025-6965 Upstream summary: [email protected] reports: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could […]
🟢 Low ⏱ 5–15 min Last verified: 7 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Template::Toolkit — Directory traversal on write Related CVEs: CVE-2019-19781 Upstream summary: Art Manion and Will Dormann report: By using an older and less-secure form of open(), it is possible for […]
🟢 Low ⏱ 5–15 min Last verified: 7 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-foolscap — local file inclusion Upstream summary: Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gd — '_gdGetColors' remote buffer overflow vulnerability Related CVEs: CVE-2009-3546 Upstream summary: CVE reports: The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.0, and the GD Graphics Library 2.x, […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tensorflow — denial of service vulnerability Related CVEs: CVE-2022-35935 CVE-2022-35941 CVE-2022-35991 Upstream summary: Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report: Another instance of CVE-2022-35935, where `SobolSample` is […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — insecure temporary file creation vulnerability Related CVEs: CVE-2004-0967 Upstream summary: Ghostscript is affected by an insecure temporary file creation vulnerability. This issue is likely due to a design […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: magento — multiple vulnerabilities Related CVEs: CVE-2012-3363 Upstream summary: Magento, Inc. reports: SUPEE-6482 – This patch addresses two issues related to APIs and two cross-site scripting risks. SUPEE-6285 – This […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-nicotine-plus — Denial of service vulnerability Related CVEs: CVE-2021-45848 Upstream summary: ztauras reports: Denial of service (DoS) vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows […]
