🟢 Low ⏱ 5–15 min Last verified: 2 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-WsgiDAV — XSS vulnerability Related CVEs: CVE-2022-41905 Upstream summary: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 2 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tnef — An attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message Related CVEs: CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 CVE-2019-18849 Upstream summary: [email protected] reports: In […]
🟢 Low ⏱ 5–15 min Last verified: 2 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: unace — multiple vulnerabilities Related CVEs: CVE-2005-0160 CVE-2005-0161 Upstream summary: Ulf Härnhammar reports: There are buffer overflows when extracting, testing or listing specially prepared ACE archives. There are directory traversal […]
🟡 Medium ⏱ 10–30 min Last verified: 2 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cvsbug — race condition Related CVEs: CAN-2005-2693 CVE-2004-0180 CVE-2004-0405 CVE-2004-0414 CVE-2004-0416 CVE-2004-0417 CVE-2004-0418 CVE-2004-0778 Upstream summary: Problem description A temporary file is created, used, deleted, and then re-created with the […]
🟢 Low ⏱ 5–15 min Last verified: 1 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — PL/Perl environment variable changes execute arbitrary code Related CVEs: CVE-2024-10979 Upstream summary: PostgreSQL project reports: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user […]
🟢 Low ⏱ 5–15 min Last verified: 1 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-File-Path — rmtree allows creation of setuid files Related CVEs: CVE-2005-0448 Upstream summary: Jan Lieskovsky reports: perl-File-Path rmtree race condition (CVE-2005-0448 was assigned to address this) This vulnerability was fixed […]
🟠 High ⏱ 15–60 min Last verified: 1 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wireshark — multiple security issues Related CVEs: CVE-2015-6241 CVE-2015-6242 CVE-2015-6243 CVE-2015-6244 CVE-2015-6245 CVE-2015-6246 CVE-2015-6247 CVE-2015-6248 +12 more Upstream summary: wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. (CVE-2018-7335) wnpa-sec-2018-06. Large […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnupg — attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output Related CVEs: CVE-2016-6313 Upstream summary: Werner Koch reports: There was a […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: file-roller — path traversal vulnerability Related CVEs: CVE-2016-7162 Upstream summary: reports: File Roller 3.5.4 through 3.20.2 was affected by a path traversal bug that could result in deleted files if […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zgv, xzgv — heap overflow vulnerability Related CVEs: CVE-2004-0994 CVE-2006-1060 Upstream summary: Gentoo reports: Andrea Barisani of Gentoo Linux discovered xzgv and zgv allocate insufficient memory when rendering images with […]
