🟢 Low ⏱ 5–15 min Last verified: 13 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — users of single-sign-on are vulnerable to phishing Related CVEs: CVE-2019-5885 Upstream summary: Matrix developers report: [The 1.11.1] release includes a security fix impacting installations using Single Sign-On (i.e. […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Subversion — Multiple vulnerabilities in server code Related CVEs: CVE-2021-28544 CVE-2022-24070 Upstream summary: Subversion project reports: Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: squashfs-tools — Integer overflow Related CVEs: CVE-2015-4645 Upstream summary: Phillip Lougher reports: Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-sentry-sdk — sensitive cookies leak Related CVEs: CVE-2023-28117 Upstream summary: Tom Wolters reports: When using the Django integration of the Sentry SDK in a specific configuration it is possible to […]
🟠 High ⏱ 15–60 min Last verified: 13 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292 +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]
🟢 Low ⏱ 5–15 min Last verified: 12 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Sanitize — XSS vulnerability Related CVEs: CVE-2018-3740 Upstream summary: Sanitize release: Fixed an HTML injection vulnerability that could allow XSS. When Sanitize <= 4.6.2 is used in combination with libxml2 […]
🟠 High ⏱ 15–60 min Last verified: 12 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: oniguruma — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772 +5 more Upstream summary: the PHP project reports: A stack out-of-bounds read occurs in match_at() during […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: diffoscope — arbitrary file write Related CVEs: CVE-2017-0359 Upstream summary: Ximin Luo reports: [v67] introduced a security hole where diffoscope may write to arbitrary locations on disk depending on the […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libqb — Buffer overflow Related CVEs: CVE-2023-39976 Upstream summary: [email protected] reports: log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: open-vm-tools — Multiple vulnerabilities Related CVEs: CVE-2023-34058 CVE-2023-34059 Upstream summary: VMware reports: This update includes 2 security fixes: High CVE-2023-34058: SAML token signature bypass vulnerability High CVE-2023-34059: File descriptor hijack […]
