🟡 Medium ⏱ 10–30 min Last verified: 25 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gftp — multiple vulnerabilities Related CVEs: CVE-2005-0372 CVE-2007-3961 CVE-2007-3962 Upstream summary: Gentoo reports: Kalle Olavi Niemitalo discovered two boundary errors in fsplib code included in gFTP when processing overly long […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cyrus-sasl — Fix off by one error Related CVEs: CVE-2004-0884 CVE-2006-1721 CVE-2009-0688 CVE-2019-19906 Upstream summary: Cyrus SASL 2.1.x Release Notes New in 2.1.28 reports: Fix off by one error Table […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2020-2574 Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rt and dependent modules — multiple security vulnerabilities Related CVEs: CVE-2012-2770 CVE-2015-7686 CVE-2016-6127 CVE-2017-5361 CVE-2017-5943 CVE-2017-5944 Upstream summary: BestPractical reports: Please reference CVE/URL list for details Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Mozilla — Sandbox escape Related CVEs: CVE-2025-14321 CVE-2025-14322 Upstream summary: https://bugzilla.mozilla.org/show_bug.cgi?id=1996473 reports: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
🟢 Low ⏱ 5–15 min Last verified: 24 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rockdodger — buffer overflows Upstream summary: The environment variable HOME is copied without regard to buffer size, which can be used to gain elevated privilege if the binary is installed […]
🟠 High ⏱ 15–60 min Last verified: 24 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rails — XSS vulnerabilities Related CVEs: CVE-2015-7576 CVE-2015-7577 CVE-2015-7581 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753 CVE-2016-2097 CVE-2016-2098 +12 more Upstream summary: Ruby on Rails blog: This is an announcement to let you know […]
🟠 High ⏱ 15–60 min Last verified: 24 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Intel CPUs — multiple vulnerabilities Related CVEs: CVE-2023-22655 CVE-2023-28746 CVE-2023-38575 CVE-2023-39368 CVE-2023-42667 CVE-2023-43490 CVE-2023-43758 CVE-2023-45733 +12 more Upstream summary: Intel reports: A potential security vulnerability in some Intel Processors may […]
🟢 Low ⏱ 5–15 min Last verified: 24 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tauthon — Regular Expression Denial of Service Related CVEs: CVE-2020-8492 Upstream summary: The :class:`~urllib.request.AbstractBasicAuthHandler` class of the :mod:`urllib.request` module uses an inefficient regular expression which can be exploited by an […]
