🟢 Low ⏱ 5–15 min Last verified: 2 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: proxychains-ng — current path as the first directory for the library search path Related CVEs: CVE-2015-3887 Upstream summary: Mamoru TASAKA reports: proxychains4 sets LD_PRELOAD to dlopen libproxychains4.so and execvp() the […]
🟡 Medium ⏱ 10–30 min Last verified: 1 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — Enforce the reader to run in constant memory Related CVEs: CVE-2013-2877 CVE-2014-0191 CVE-2014-3660 CVE-2015-1819 Upstream summary: Daniel Veilland reports: Enforce the reader to run in constant memory. One […]
🟡 Medium ⏱ 10–30 min Last verified: 1 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libvncserver — multiple buffer overflows Related CVEs: CVE-2014-6051 CVE-2014-6052 CVE-2014-6053 CVE-2014-6054 CVE-2014-6055 CVE-2016-9941 CVE-2016-9942 Upstream summary: libvnc server reports: Two unrelated buffer overflows can be used by a malicious server […]
🟢 Low ⏱ 5–15 min Last verified: 1 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bacula — Console ACL Bypass Related CVEs: CVE-2012-4430 Upstream summary: A security issue has been reported in Bacula, which can be exploited by malicious users to bypass certain security restrictions. […]
🟢 Low ⏱ 5–15 min Last verified: 1 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-sqlalchemy12 — multiple SQL Injection vulnerabilities Related CVEs: CVE-2019-7164 CVE-2019-7548 Upstream summary: 21k reports: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. nosecurity reports: […]
🟠 High ⏱ 15–60 min Last verified: 30 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kauth: Local privilege escalation Related CVEs: CVE-2004-0411 CVE-2004-0689 CVE-2004-0690 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0746 CVE-2004-1156 +12 more Upstream summary: Albert Astals Cid reports: KAuth contains a logic flaw in which the […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpldapadmin — XSS vulnerability Related CVEs: CVE-2020-35132 Upstream summary: [email protected] reports: An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenLDAP — incorrect handling of NULL in certificate Common Name Related CVEs: CVE-2009-3767 Upstream summary: Jan Lieskovsky reports: OpenLDAP does not properly handle a '\0' character in a domain name […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2007-0774 CVE-2007-1860 Upstream summary: Kazu Nambo reports: URL decoding the Apache webserver prior to decoding in the Tomcat server could pypass access control rules […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nss-pam-ldapd — file descriptor buffer overflow Related CVEs: CVE-2013-0288 Upstream summary: Garth Mollett reports: A file descriptor overflow issue in the use of FD_SET() in nss-pam-ldapd can lead to a […]
