🟢 Low ⏱ 5–15 min Last verified: 17 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: portaudit — auditfile remote code execution Upstream summary: Michael Gmelin and Jörg Scheinert has reported a remote command execution vulnerability in portaudit. An attacker who can get the user to […]
🟢 Low ⏱ 5–15 min Last verified: 17 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-mbstring — php mbstring buffer overflow vulnerability Related CVEs: CVE-2008-5557 Upstream summary: SecurityFocus reports: PHP is prone to a buffer-overflow vulnerability because it fails to perform boundary checks before copying […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mutt — buffer overflow vulnerability Related CVEs: CVE-2007-2683 Upstream summary: Securityfocus reports: Mutt is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before using […]
🟡 Medium ⏱ 10–30 min Last verified: 16 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: textproc/elasticsearch6 — field disclosure flaw Related CVEs: CVE-2014-3120 CVE-2014-6439 CVE-2015-1427 CVE-2015-3337 CVE-2015-4165 CVE-2015-5377 CVE-2015-5531 CVE-2020-7019 Upstream summary: Elastic reports: A field disclosure flaw was found in Elasticsearch when running a […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: plasma[56]-plasma-workspace — Unauthorized users can access session manager Related CVEs: CVE-2024-36041 Upstream summary: David Edmundson reports: KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE based purely on the host, […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libzip — integer overflow Related CVEs: CVE-2015-2331 Upstream summary: libzip developers report: Avoid integer overflow. Fixed similarly to patch used in PHP copy of libzip. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygems — request hijacking vulnerability Related CVEs: CVE-2015-3900 Upstream summary: Jonathan Claudius reports: RubyGems provides the ability of a domain to direct clients to a separate host that is used […]
🟠 High ⏱ 15–60 min Last verified: 16 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0722 CVE-2004-0757 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
🟠 High ⏱ 15–60 min Last verified: 16 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Related CVEs: CVE-2007-4894 CVE-2007-5710 CVE-2008-4107 CVE-2008-5278 CVE-2009-2762 CVE-2009-3890 CVE-2009-3891 CVE-2010-4257 +12 more Upstream summary: wordpress developers reports: This security and maintenance release features 1 bug fix […]
🟢 Low ⏱ 5–15 min Last verified: 15 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sox — memory corruption vulnerabilities Related CVEs: CVE-2004-0557 CVE-2014-8145 Upstream summary: Michele Spagnuolo, Google Security Team, reports: The write heap buffer overflows are related to ADPCM handling in WAV files, […]
