🟢 Low ⏱ 5–15 min Last verified: 10 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dendrite — Server-side request forgery vulnerability Related CVEs: CVE-2022-36009 CVE-2024-52594 Upstream summary: Dendrite team reports: This is a security release, gomatrixserverlib was vulnerable to server-side request forgery, serving content from […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rar — password prompt buffer overflow vulnerability Related CVEs: CVE-2007-0855 Upstream summary: iDefense reports: Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 9 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pine remotely exploitable buffer overflow in newmail.c Related CVEs: CVE-2002-1320 CVE-2003-0720 CVE-2003-0721 Upstream summary: Kris Kennaway reports a remotely exploitable buffer overflow in newmail.c. Mike Silbersack submitted the fix. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 9 May 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PptiPNG — Global-buffer-overflow Related CVEs: CVE-2008-5101 CVE-2012-4432 CVE-2015-7801 CVE-2015-7802 CVE-2016-2191 CVE-2016-3981 CVE-2016-3982 CVE-2023-43907 Upstream summary: Frank-Z7 reports: Running optipng with the "-zm 3 -zc 1 -zw 256 -snip -out" configuration […]
🟠 High ⏱ 15–60 min Last verified: 9 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rails — XSS vulnerabilities Related CVEs: CVE-2012-3424 CVE-2012-3463 CVE-2012-3464 CVE-2012-3465 CVE-2013-0155 CVE-2013-0156 CVE-2013-1854 CVE-2013-1856 +12 more Upstream summary: Ruby on Rails blog: This is an announcement to let you know […]
🟠 High ⏱ 15–60 min Last verified: 9 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: opera — moderately severe issue Related CVEs: CVE-2004-0411 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-1156 CVE-2004-1157 CVE-2004-1158 CVE-2004-1160 +12 more Upstream summary: Opera reports: Fixed a moderately severe issue, as reported by Attila […]
🟡 Medium ⏱ 10–30 min Last verified: 8 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]
🟡 Medium ⏱ 10–30 min Last verified: 8 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ncurses — multiple issues Related CVEs: CVE-2017-13728 CVE-2017-13729 CVE-2017-13730 CVE-2017-13731 CVE-2017-13732 CVE-2017-13733 CVE-2017-13734 Upstream summary: ncurses developers reports: There are multiple illegal address access issues and an infinite loop issue. […]
🟢 Low ⏱ 5–15 min Last verified: 8 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kaminari — potential XSS vulnerability Related CVEs: CVE-2020-11082 Upstream summary: Kaminari Security Advisories: There was a vulnerability in versions of Kaminari that would allow an attacker to inject arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 8 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tinyproxy — ACL lists ineffective when range is configured Related CVEs: CVE-2011-1499 Upstream summary: When including a line to allow a network of IP addresses, the access to tinyproxy 56 […]
