🟢 Low ⏱ 5–15 min Last verified: 12 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lrzsz — Integer overflow in zmodem, crash and information leak Related CVEs: CVE-2018-10195 Upstream summary: [email protected] reports: Lrzsz has an integer overflow vulernability in the src/zm.c:zsdata() function. An attacker could […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]
🟡 Medium ⏱ 10–30 min Last verified: 12 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 CVE-2020-15118 CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A […]
🟡 Medium ⏱ 10–30 min Last verified: 12 September 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — libpq retains an error message from man-in-the-middle Related CVEs: CVE-2022-41862 CVE-2024-10977 CVE-2024-7348 Upstream summary: PostgreSQL project reports: Client use of server error message in PostgreSQL allows a server […]
🟠 High ⏱ 15–60 min Last verified: 12 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ghostscript — Security bypass vulnerabilities Related CVEs: CVE-2015-3228 CVE-2018-15908 CVE-2018-15909 CVE-2018-15910 CVE-2018-15911 CVE-2019-14811 CVE-2019-14812 CVE-2019-14813 +3 more Upstream summary: Cedric Buissart (Red Hat) reports: A flaw was found in, ghostscript […]
🟢 Low ⏱ 5–15 min Last verified: 11 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ident2 double byte buffer overflow Related CVEs: CVE-2004-0408 Upstream summary: Jack of RaptureSecurity reported a double byte buffer overflow in ident2. The bug may allow a remote attacker to execute […]
🟢 Low ⏱ 5–15 min Last verified: 11 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kibana4 — XSS vulnerability Related CVEs: CVE-2015-8131 Upstream summary: Elastic reports: Fixes XSS vulnerability (CVE pending) – Thanks to Vladimir Ivanov for responsibly reporting. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 11 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: icu — multiple vulnerabilities Related CVEs: CVE-2017-7867 CVE-2017-7868 Upstream summary: NVD reports: International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer […]
🟢 Low ⏱ 5–15 min Last verified: 11 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: brotli — buffer overflow Related CVEs: CVE-2016-1624 CVE-2016-1968 Upstream summary: Google Chrome Releases reports: [583607] High CVE-2016-1624: Buffer overflow in Brotli. Credit to lukezli. Mozilla Foundation reports: Security researcher Luke […]
🟡 Medium ⏱ 10–30 min Last verified: 11 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pcre — arbitrary code execution Related CVEs: CVE-2005-2491 CVE-2007-1659 CVE-2007-1660 CVE-2007-1661 CVE-2007-1662 CVE-2007-4766 CVE-2007-4767 CVE-2007-4768 Upstream summary: Debian project reports: Tavis Ormandy of the Google Security Team has discovered several […]
