🟡 Medium ⏱ 10–30 min Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: freeradius — EAP-TTLS Tunnel Memory Leak Remote DOS Vulnerability Related CVEs: CVE-2005-1454 CVE-2005-1455 CVE-2005-4745 CVE-2007-2028 Upstream summary: The freeradius development team reports: A malicious 802.1x supplicant could send malformed Diameter […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tdiary — injection vulnerability Related CVEs: CVE-2006-6174 Upstream summary: An undisclosed eRuby injection vulnerability had been discovered in tDiary. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: twiki — remote Perl code execution Related CVEs: CVE-2004-1037 CVE-2006-3336 CVE-2008-3195 CVE-2008-5304 CVE-2008-5305 CVE-2014-7236 Upstream summary: TWiki developers report: The debugenableplugins request parameter allows arbitrary Perl code execution. Using an […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: serendipity — multiple cross site scripting vulnerabilities Related CVEs: CVE-2008-1385 CVE-2008-1386 Upstream summary: Hanno Boeck reports: The installer of serendipity 1.3 has various Cross Site Scripting issues. This is considered […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/openvpn-auth-ldap — Fix buffer overflow in challenge/response Related CVEs: CVE-2024-28820 Upstream summary: Graham Northup reports: A buffer overflow in extract_openvpn_cr allows attackers with a valid LDAP username and who can […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: groovy — remote execution of untrusted code/DoS vulnerability Related CVEs: CVE-2015-3253 CVE-2016-6814 Upstream summary: The Apache Groovy project reports: When an application with Groovy on classpath uses standard Java serialization […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/ossec-hids-* — root escalation via syscheck feature Related CVEs: CVE-2014-5284 CVE-2015-3222 Upstream summary: OSSEC reports: The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gpgme — heap-based buffer overflow in gpgsm status handler Related CVEs: CVE-2014-3564 Upstream summary: Tomas Trnka reports: Gpgme contains a buffer overflow in the gpgsm status handler that could possibly […]
🟢 Low ⏱ 5–15 min Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libspf2 — Integer Underflow Remote Code Execution Related CVEs: CVE-2008-2469 CVE-2023-42118 Upstream summary: Trendmicro ZDI reports: Integer Underflow Remote Code Execution Vulnerability The specific flaw exists within the parsing of […]
🟠 High ⏱ 15–60 min Last verified: 15 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
