🟢 Low ⏱ 5–15 min Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: librsvg2 — multiple vulnerabilities Related CVEs: CVE-2019-20446 Upstream summary: Librsvg2 developers reports: Backport the following fixes from 2.46.x: Librsvg now has limits on the number of loaded XML elements, and […]
🟢 Low ⏱ 5–15 min Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: squidGuard — multiple vulnerabilities Related CVEs: CVE-2009-3700 CVE-2009-3826 Upstream summary: SquidGuard website reports: Patch 20091015 fixes one buffer overflow problem in sgLog.c when overlong URLs are requested. SquidGuard will then […]
🟢 Low ⏱ 5–15 min Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: plib — remote code execution via buffer overflow Related CVEs: CVE-2010-3384 CVE-2011-4620 Upstream summary: Secunia reports: A vulnerability has been discovered in PLIB, which can be exploited by malicious people […]
🟢 Low ⏱ 5–15 min Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: LibYAML input sanitization errors Related CVEs: CVE-2014-2525 Upstream summary: oCERT reports: The LibYAML project is an open source YAML 1.1 parser and emitter written in C. The library is affected […]
🟢 Low ⏱ 5–15 min Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ImageMagick and GraphicsMagick — DoS via specially crafted PNG file Related CVEs: CVE-2012-3438 Upstream summary: Kurt Seifried reports: There is an issue in ImageMagick that is also present in GraphicsMagick. […]
🟢 Low ⏱ 5–15 min Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pecl-phar — format string vulnerability Related CVEs: CVE-2010-2094 Upstream summary: Entry for CVE-2010-2094 says: Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 13 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2016-2048 CVE-2016-2512 CVE-2016-2513 Upstream summary: Tim Graham reports: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth User enumeration through […]
🟢 Low ⏱ 5–15 min Last verified: 13 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — XSS Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block type Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 13 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cassandra3 — multiple vulnerabilities Related CVEs: CVE-2015-0225 CVE-2015-0886 CVE-2019-2684 CVE-2020-7238 CVE-2021-44521 CVE-2022-24823 CVE-2022-25857 CVE-2022-42003 +1 more Upstream summary: Cassandra tema reports: This release contains 6 security fixes including CVE-2022-24823: When […]
🟠 High ⏱ 15–60 min Last verified: 13 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h2o — HTTP/2 Rapid Reset attack vulnerability Related CVEs: CVE-2015-5638 CVE-2016-1133 CVE-2016-4864 CVE-2017-10868 CVE-2017-10869 CVE-2018-0608 CVE-2019-9512 CVE-2019-9514 +3 more Upstream summary: Kazuo Okuhu reports: H2O is vulnerable to the HTTP/2 […]
