🟢 Low ⏱ 5–15 min Last verified: 6 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2022-31052 CVE-2024-31208 CVE-2024-37302 CVE-2024-37303 CVE-2024-52805 CVE-2024-52815 CVE-2024-53863 CVE-2024-53867 +1 more Upstream summary: element-hq/synapse developers report: A malicious server can […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rest-client — plaintext password disclosure Related CVEs: CVE-2015-1820 CVE-2015-3448 Upstream summary: The open sourced vulnerability database reports: REST Client for Ruby contains a flaw that is due to the application […]
🟡 Medium ⏱ 10–30 min Last verified: 5 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: irc/bitchx — multiple vulnerabilities Related CVEs: CVE-2007-4584 CVE-2007-5839 CVE-2007-5922 Upstream summary: bannedit reports: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxine — multiple vulnerabilities Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2004-1300 CVE-2004-1379 CVE-2005-1195 CVE-2005-2967 CVE-2006-1664 +12 more Upstream summary: xine developers report: Fix another possible int overflow in the 4XM demuxer. […]
🟢 Low ⏱ 5–15 min Last verified: 5 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]
🟡 Medium ⏱ 10–30 min Last verified: 5 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vscode — security feature bypass vulnerability Related CVEs: CVE-2023-29338 CVE-2023-33144 CVE-2023-36742 CVE-2024-43601 CVE-2025-21264 CVE-2025-24039 CVE-2025-24042 Upstream summary: VSCode developers report: A security feature bypass vulnerability exists in VS Code 1.100.0 […]
🟢 Low ⏱ 5–15 min Last verified: 5 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-4643 CVE-2015-4644 Upstream summary: The PHP project reports: DOM and GD: Fixed bug #69719 (Incorrect handling of paths with NULs). FTP: Improved fix for […]
🟡 Medium ⏱ 10–30 min Last verified: 5 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: typo3-{11,12} — multiple vulnerabilities Related CVEs: CVE-2023-30451 CVE-2023-47125 CVE-2023-47126 CVE-2023-47127 CVE-2024-22188 CVE-2024-25118 CVE-2024-25119 CVE-2024-25120 +1 more Upstream summary: Typo3 developers reports: All versions are security releases and contain important security […]
🟢 Low ⏱ 5–15 min Last verified: 5 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CAN-2005-2978 CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow […]
