🟢 Low ⏱ 5–15 min Last verified: 3 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde-base — XSS: VCARD attachments vulnerability Related CVEs: CVE-2008-3823 CVE-2008-3824 Upstream summary: The Horde team reports: The major changes compared to Horde version 3.3.10 are: * Fixed XSS vulnerability when […]
🟢 Low ⏱ 5–15 min Last verified: 3 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sircd — remote reverse DNS buffer overflow Upstream summary: Secunia reports: A vulnerability in sircd can be exploited by a malicious person to compromise a vulnerable system. The vulnerability is […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libgadu — multiple vulnerabilities Related CVEs: CVE-2004-0005 CVE-2004-0006 CVE-2004-0007 CVE-2004-0008 CVE-2004-0500 CVE-2004-0754 CVE-2004-0784 CVE-2004-0785 +12 more Upstream summary: Wojtek Kaniewski reports: Multiple vulnerabilities have been found in libgadu, a library […]
🟡 Medium ⏱ 10–30 min Last verified: 3 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: flac — fix encoder bug Related CVEs: CVE-2007-3507 CVE-2007-4619 CVE-2014-8962 CVE-2014-9028 CVE-2020-0499 CVE-2021-0561 Upstream summary: The FLAC 1.3.4 release reports: Fix 12 decoder bugs found by oss-fuzz. Fix encoder bug […]
🟢 Low ⏱ 5–15 min Last verified: 3 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟢 Low ⏱ 5–15 min Last verified: 3 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: eggdrop — denial of service vulnerability Related CVEs: CVE-2009-1789 Upstream summary: Secunia reports: The vulnerability is caused due to an error in the processing of private messages within the server […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — password hash disclosure Related CVEs: CVE-2014-0472 CVE-2014-0473 CVE-2014-0474 CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 CVE-2015-0219 +12 more Upstream summary: Django release notes: CVE-2018-16984: Password hash disclosure to "view only" admin […]
🟡 Medium ⏱ 10–30 min Last verified: 2 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libksba — local denial of service vulnerabilities Related CVEs: CVE-2016-4353 CVE-2016-4354 CVE-2016-4355 CVE-2016-4356 Upstream summary: Martin Prpic, Red Hat Product Security Team, reports: Denial of Service due to stack overflow […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fluidsynth — Use after free when using DLS files Related CVEs: CVE-2025-68617 Upstream summary: The fluidsynth authors report: A race condition during unloading of a DLS file can trigger a […]
