🟢 Low ⏱ 5–15 min Last verified: 27 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]
🟢 Low ⏱ 5–15 min Last verified: 27 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]
🟡 Medium ⏱ 10–30 min Last verified: 27 February 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — multiple vulnerabilities Related CVEs: CVE-2025-49794 CVE-2025-49795 CVE-2025-6021 CVE-2025-6170 Upstream summary: Alan Coopersmith reports: As discussed in https://gitlab.gnome.org/GNOME/libxml2/-/issues/913 the security policy of libxml2 has been changed to disclose vulnerabilities […]
🟢 Low ⏱ 5–15 min Last verified: 27 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟢 Low ⏱ 5–15 min Last verified: 27 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zabbix — shell command injection vulnerability Related CVEs: CVE-2013-6824 Upstream summary: Recurity Labs Team project reports: Zabbix agent is vulnerable to remote command execution from the Zabbix server in some […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gstreamer1-plugins-ogg — Out-of-bounds write in Ogg demuxer Related CVEs: CVE-2024-47615 Upstream summary: The GStreamer Security Center reports: An out-of-bounds write in the Ogg demuxer that can cause crashes for certain […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sudo-rs — Authenticating user not recorded properly in timestamp Related CVEs: CVE-2025-64170 CVE-2025-64517 Upstream summary: Trifecta Tech Foundation reports: With Defaults targetpw (or Defaults rootpw) enabled, the password of the […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: msmtp — certificate-verification issue Related CVEs: CVE-2019-8337 Upstream summary: msmtp developers report: In msmtp 1.8.2, when tls_trust_file has its default configuration, certificate-verification results are not properly checked. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 26 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0700 CVE-2004-0885 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using […]
🟠 High ⏱ 15–60 min Last verified: 25 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ImageMagick6 — multiple vulnerabilities Related CVEs: CVE-2019-10131 CVE-2019-10649 CVE-2019-10650 CVE-2019-10714 CVE-2019-11470 CVE-2019-11472 CVE-2019-11597 CVE-2019-11598 +9 more Upstream summary: CVE reports: Several vulnerabilities have been discovered in ImageMagick: CVE-2021-20309: A flaw […]
