🟢 Low ⏱ 5–15 min Last verified: 31 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rundeck3 — Log4J RCE vulnerability Related CVEs: CVE-2021-44832 Upstream summary: The Rundeck project reports: This release updates both Community and Enterprise with the latest Log4J to address CVE-2021-44832 by updating […]
🟢 Low ⏱ 5–15 min Last verified: 31 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gsoap — remote code execution via via overflow Related CVEs: CVE-2017-9765 Upstream summary: Senrio reports: Genivia gSOAP is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pine remotely exploitable buffer overflow in newmail.c Related CVEs: CVE-2002-1320 CVE-2003-0720 CVE-2003-0721 Upstream summary: Kris Kennaway reports a remotely exploitable buffer overflow in newmail.c. Mike Silbersack submitted the fix. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2022-31052 CVE-2024-31208 CVE-2024-37302 CVE-2024-37303 CVE-2024-52805 CVE-2024-52815 CVE-2024-53863 CVE-2024-53867 +1 more Upstream summary: element-hq/synapse developers report: A malicious server can […]
🟢 Low ⏱ 5–15 min Last verified: 30 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-httpie — exposure of sensitive information vulnerabilities Related CVEs: CVE-2022-0430 CVE-2022-24737 Upstream summary: Glyph reports: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help […]
🟢 Low ⏱ 5–15 min Last verified: 30 March 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Remote Code Execution via web-accessible composer Related CVEs: CVE-2022-24828 CVE-2023-43655 Upstream summary: Composer project reports: Description: Users publishing a composer.phar to a public web-accessible server where the composer.phar can be […]
🟠 High ⏱ 15–60 min Last verified: 30 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: advancecomp — Multiple vulnerabilities Related CVEs: CVE-2018-1056 CVE-2019-8379 CVE-2019-8383 CVE-2019-9210 CVE-2022-35014 CVE-2022-35015 CVE-2022-35016 CVE-2022-35017 +3 more Upstream summary: GitHub advisories reports: Multiple vulnerabilities found in advancecomp including: Three segmentation faults. […]
🟢 Low ⏱ 5–15 min Last verified: 30 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: java 7.x — security manager bypass Related CVEs: CVE-2012-4681 CVE-2013-0433 Upstream summary: US CERT reports: Java 7 Update 10 and earlier versions of Java 7 contain a vulnerability that can […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ampache — insecure temporary file usage Related CVEs: CVE-2008-3929 Upstream summary: Secunia reports: A security issue has been reported in Ampache, which can be exploited by malicious, local users to […]
