🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-djblets — Self-XSS vulnerability Upstream summary: Djblets Release Notes reports: A recently-discovered vulnerability in the datagrid templates allows an attacker to generate a URL to any datagrid page containing malicious […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jdk — jar directory traversal vulnerability Related CVEs: CVE-2004-1029 CVE-2005-1080 Upstream summary: Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to […]
🟠 High ⏱ 15–60 min Last verified: 13 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: clamav — multiple vulnerabilities Related CVEs: CVE-2005-0133 CVE-2005-1922 CVE-2005-1923 CVE-2005-2919 CVE-2005-2920 CVE-2006-0162 CVE-2006-1614 CVE-2006-1615 +12 more Upstream summary: ClamAV project reports: ClamAV 0.98.7 is here! This release contains new scanning […]
🟡 Medium ⏱ 10–30 min Last verified: 13 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Related CVEs: CVE-2005-1992 CVE-2005-2337 CVE-2006-3694 CVE-2006-5467 CVE-2006-6303 CVE-2008-2726 Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]
🟠 High ⏱ 15–60 min Last verified: 13 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
🟠 High ⏱ 15–60 min Last verified: 13 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — potential SQL injection vulnerability Related CVEs: CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-0305 CVE-2013-0306 CVE-2013-1443 CVE-2013-1664 CVE-2013-1665 +12 more Upstream summary: MITRE CVE reports: Django 1.11 before 1.11.29, 2.2 before 2.2.11, […]
🟢 Low ⏱ 5–15 min Last verified: 12 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: password-store — GPG parsing vulnerabilities Related CVEs: CVE-2018-12356 Upstream summary: Jason A. Donenfeld reports: Markus Brinkmann discovered that [the] parsing of gpg command line output with regexes isn't anchored to […]
🟢 Low ⏱ 5–15 min Last verified: 12 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: net/krill — DoS vulnerability Related CVEs: CVE-2023-0158 Upstream summary: MITRE reports: NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the "/rrdp" […]
