🟡 Medium ⏱ 10–30 min Last verified: 21 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2008-2302 CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 21 August 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dendrite — Server-side request forgery vulnerability Related CVEs: CVE-2022-36009 CVE-2024-52594 Upstream summary: Dendrite team reports: This is a security release, gomatrixserverlib was vulnerable to server-side request forgery, serving content from […]
🟢 Low ⏱ 5–15 min Last verified: 21 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: duo — Two-factor authentication bypass Upstream summary: The duo security team reports: An untrusted user may be able to set the http_proxy variable to an invalid address. If this happens, […]
🟢 Low ⏱ 5–15 min Last verified: 21 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xterm — DECRQSS remote command execution vulnerability Related CVEs: CVE-2008-2383 Upstream summary: SecurityFocus reports: The xterm program is prone to a remote command-execution vulnerability because it fails to sufficiently validate […]
🟢 Low ⏱ 5–15 min Last verified: 21 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: subversion — heap overflow vulnerability Related CVEs: CVE-2009-2411 Upstream summary: A Subversion Security Advisory reports: Subversion clients and servers have multiple heap overflow issues in the parsing of binary deltas. […]
🟢 Low ⏱ 5–15 min Last verified: 20 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: geeklog xss vulnerability Related CVEs: CVE-2006-3756 Upstream summary: Geeklog reports: MustLive pointed out a possible XSS in the form to email an article to a friend that we're fixing with […]
🟡 Medium ⏱ 10–30 min Last verified: 20 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcp — remotely exploitable vulnerability Related CVEs: CVE-2018-5732 CVE-2018-5733 CVE-2021-25217 Upstream summary: Michael McNally reports: Program code used by the ISC DHCP package to read and parse stored leases has […]
🟢 Low ⏱ 5–15 min Last verified: 20 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ezbounce remote format string vulnerability Related CVEs: CVE-2003-0510 Upstream summary: A security hole exists that can be used to crash the proxy and execute arbitrary code. An exploit is circulating […]
🟡 Medium ⏱ 10–30 min Last verified: 19 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dhcpcd — remote code execution/denial of service Related CVEs: CVE-2014-7912 CVE-2014-7913 CVE-2016-1503 CVE-2016-1504 Upstream summary: MITRE reports: The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd […]
🟢 Low ⏱ 5–15 min Last verified: 19 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gdcm — multiple vulnerabilities Related CVEs: CVE-2015-8396 CVE-2015-8397 Upstream summary: CENSUS S.A. reports: GDCM versions 2.6.0 and 2.6.1 (and possibly previous versions) are prone to an integer overflow vulnerability which […]
