🟢 Low ⏱ 5–15 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: inn — plaintext command injection into encrypted channel Related CVEs: CVE-2011-0411 CVE-2012-3523 Upstream summary: INN developers report: Fixed a possible plaintext command injection during the negotiation of a TLS layer. […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache22 — chunk header parsing defect Related CVEs: CVE-2012-0833 CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 CVE-2013-1862 CVE-2013-1896 CVE-2013-5704 CVE-2013-6438 +5 more Upstream summary: Apache Foundation reports: CVE-2015-3183 core: Fix chunk header parsing defect. […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — use-after-free vulnerability Upstream summary: Symeon Paraschoudis reports: Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk() Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Libgit2 — Fixing insufficient validation of submodule names Related CVEs: CVE-2018-11235 Upstream summary: The Git community reports: Insufficient validation of submodule names Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libsamplerate — multiple vulnerabilities Related CVEs: CVE-2017-7697 Upstream summary: NVD reports: In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file. […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hcode — buffer overflow in mail.c Related CVEs: CVE-2024-34020 Upstream summary: The openSUSE project reports: The problematic function in question is putSDN() in mail.c. The static variable `cp` is used […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: froxlor — database password information leak Related CVEs: CVE-2015-5959 Upstream summary: [email protected] reports: An unauthenticated remote attacker is able to get the database password via webaccess due to wrong file […]
🟠 High ⏱ 15–60 min Last verified: 10 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xorg-server — Multiple vulnerabilities Related CVEs: CVE-2005-2495 CVE-2006-0745 CVE-2007-5760 CVE-2007-5958 CVE-2007-6427 CVE-2007-6428 CVE-2007-6429 CVE-2008-0006 +12 more Upstream summary: X.Org project reports: Multiple issues have been found in the X server […]
🟢 Low ⏱ 5–15 min Last verified: 9 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cdf3 — Buffer overflow vulnerability Related CVEs: CVE-2008-2080 Upstream summary: NASA Goddard Space Flight Center reports: The libraries for the scientific data file format, Common Data Format (CDF) version 3.2 […]
🟡 Medium ⏱ 10–30 min Last verified: 9 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]
