🟡 Medium ⏱ 10–30 min Last verified: 14 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mupdf — multiple vulnerabilities Related CVEs: CVE-2016-6265 CVE-2016-6525 Upstream summary: Tobias Kortkamp reports: Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: avahi — denial of service Related CVEs: CVE-2010-2244 CVE-2011-1002 Upstream summary: Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Zabbix — Remote code execution Related CVEs: CVE-2017-2824 Upstream summary: mitre reports: An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: keycloak — Multiple security fixes Related CVEs: CVE-2021-10039 CVE-2021-10270 CVE-2021-10451 CVE-2021-10492 CVE-2021-44549 CVE-2021-9666 CVE-2022-40151 CVE-2022-41966 +2 more Upstream summary: Keycloak reports: This update includes 2 security fixes: CVE-2024-11734: Unrestricted admin […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Openfire administration console authentication bypass Related CVEs: CVE-2008-1728 CVE-2008-6508 CVE-2008-6509 CVE-2008-6510 CVE-2008-6511 CVE-2009-0496 CVE-2009-0497 CVE-2009-1595 +2 more Upstream summary: [email protected] reports: Openfire's administrative console, a web-based application, was found to […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kwebkitpart, kde-runtime — insufficient input validation Related CVEs: CVE-2014-8600 Upstream summary: Albert Aastals Cid reports: kwebkitpart and the bookmarks:// io slave were not sanitizing input correctly allowing to some javascript […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kronolith — arbitrary local file inclusion vulnerability Upstream summary: iDefense Labs reports: Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: procmail — Heap-based buffer overflow Related CVEs: CVE-2017-16844 Upstream summary: MITRE reports: A remote attacker could use a flaw to cause formail to crash, resulting in a denial of service […]
