🟢 Low ⏱ 5–15 min Last verified: 16 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-foolscap — local file inclusion Upstream summary: Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xv — filename handling format string vulnerability Related CVEs: CVE-2005-0665 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Courier mail services: remotely exploitable buffer overflows Related CVEs: CVE-2004-0224 Upstream summary: The Courier set of mail services use a common Unicode library. This library contains buffer overflows in the […]
🟡 Medium ⏱ 10–30 min Last verified: 15 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vorbistools — heap buffer overflow in oggenc Related CVEs: CVE-2008-1686 CVE-2014-9638 CVE-2014-9639 CVE-2015-6749 CVE-2023-43361 Upstream summary: Frank-Z7 reports: Heap buffer overflow when vorbis-tools/oggenc converts WAV files to Ogg files. Table […]
🟠 High ⏱ 15–60 min Last verified: 15 June 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Emacs — Arbitrary code execution vulnerability Related CVEs: CVE-2005-0100 CVE-2008-3949 CVE-2012-3479 CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2024-30202 +5 more Upstream summary: Problem Description A shell injection vulnerability exists in GNU Emacs […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postsrsd — Denial of service vulnerability Related CVEs: CVE-2020-35573 Upstream summary: postsrsd developer reports: PostSRSd could be tricked into consuming a lot of CPU time with an SRS address that […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lynx — SSL certificate validation error Upstream summary: Axel Beckert reports: […] I was able to capture the password given on the commandline in traffic of an TLS handshake using […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: slim — insecure PATH assignment Related CVEs: CVE-2009-1756 CVE-2010-2945 Upstream summary: SLiM assigns logged on users a PATH in which the current working directory ("./") is included. This PATH can […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tailscale — Insufficient inbound packet filtering in subnet routers and exit nodes Related CVEs: CVE-2022-41925 CVE-2023-28436 Upstream summary: Tailscale team reports: In Tailscale versions earlier than 1.66.0, exit nodes, subnet […]
🟠 High ⏱ 15–60 min Last verified: 15 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: NodeJS — Vulnerabilities Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2015-0278 CVE-2015-5380 CVE-2016-0702 CVE-2016-0705 +12 more Upstream summary: Node.js reports: Code injection and privilege escalation through Linux capabilities- (High) http: Reading […]
