🟢 Low ⏱ 5–15 min Last verified: 9 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cgiwrap — XSS Vulnerability Related CVEs: CVE-2008-2852 Upstream summary: Secunia reports: A vulnerability has been reported in CGIWrap, which can be exploited by malicious people to conduct cross-site scripting attacks. […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: curl — SOCKS5 heap buffer overflow Related CVEs: CVE-2023-38545 Upstream summary: The curl team reports: This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: irssi — heap corruption and missing boundary checks Related CVEs: CVE-2010-1155 CVE-2010-1156 CVE-2016-7044 CVE-2016-7045 Upstream summary: Irssi reports: Remote crash and heap corruption. Remote code execution seems difficult since only […]
🟠 High ⏱ 15–60 min Last verified: 8 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 +5 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]
🟡 Medium ⏱ 10–30 min Last verified: 7 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sql-ledger — security bypass vulnerability Related CVEs: CVE-2006-4244 CVE-2006-4731 CVE-2006-5872 Upstream summary: Chris Travers reports: George Theall of Tenable Security notified the LedgerSMB core team today of an authentication bypass […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-redis — can send response data to the client of an unrelated request Related CVEs: CVE-2023-28858 CVE-2023-28859 Upstream summary: drago-balto reports: redis-py through 4.5.3 and 4.4.3 leaves a connection open […]
🟡 Medium ⏱ 10–30 min Last verified: 7 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: shibboleth-sp — vulnerable to forged user attribute data Related CVEs: CVE-2016-0729 CVE-2016-2099 CVE-2016-4463 CVE-2018-0486 CVE-2018-0489 Upstream summary: Shibboleth consortium reports: Shibboleth SP software vulnerable to additional data forgery flaws The […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: courier-imap — format string vulnerability in debug mode Related CVEs: CVE-2004-0224 CVE-2004-0777 Upstream summary: An iDEFENSE security advisory describes a format string vulnerability that could be exploited when Courier-IMAP is […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Dovecot — DoS Related CVEs: CVE-2008-4577 CVE-2008-4578 CVE-2009-3897 CVE-2011-1929 CVE-2017-15132 CVE-2017-2669 CVE-2019-10691 CVE-2019-11494 +12 more Upstream summary: Dovecot reports: A DoS is possible with a large number of address headers […]
🟠 High ⏱ 15–60 min Last verified: 6 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rails — multiple vulnerabilities Related CVEs: CVE-2013-0155 CVE-2013-0156 CVE-2013-1854 CVE-2013-1856 CVE-2013-1857 CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 +11 more Upstream summary: Ruby on Rails blog: Rails version 5.2.4.5, 6.0.3.5 and 6.1.2.1 have been […]
