🟢 Low ⏱ 5–15 min Last verified: 12 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Dulwich — Remote code execution Related CVEs: CVE-2015-0838 Upstream summary: MITRE reports: Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟢 Low ⏱ 5–15 min Last verified: 11 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: imlib2 — XPM processing buffer overflow vulnerability Related CVEs: CVE-2008-5187 Upstream summary: Secunia reports: A vulnerability has been discovered in imlib2, which can be exploited by malicious people to potentially […]
🟡 Medium ⏱ 10–30 min Last verified: 11 February 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2008-6679 CVE-2015-3228 CVE-2023-28879 Upstream summary: [email protected] reports: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading […]
🟢 Low ⏱ 5–15 min Last verified: 11 February 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tailscale — Insufficient inbound packet filtering in subnet routers and exit nodes Related CVEs: CVE-2022-41925 CVE-2023-28436 Upstream summary: Tailscale team reports: In Tailscale versions earlier than 1.66.0, exit nodes, subnet […]
🟢 Low ⏱ 5–15 min Last verified: 11 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: amavisd-new — multipart boundary confusion Related CVEs: CVE-2024-28054 Upstream summary: The Amavis project reports: Emails which consist of multiple parts (`Content-Type: multipart/*`) incorporate boundary information stating at which point one […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: freerdp — clients using the `/video` command line switch might read uninitialized data Related CVEs: CVE-2020-11017 CVE-2020-11018 CVE-2020-11019 CVE-2020-11038 CVE-2020-11039 CVE-2020-11040 CVE-2020-11041 CVE-2020-11043 +12 more Upstream summary: MITRE reports: All […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-treq — sensitive information leak vulnerability Related CVEs: CVE-2022-23607 Upstream summary: Treq's request methods (`treq.get`, `treq.post`, `HTTPClient.request`, `HTTPClient.get`, etc.) accept cookies as a dictionary. Such cookies are not bound to […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-twisted — multiple vulnerabilities Related CVEs: CVE-2019-12387 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2020-10108 CVE-2020-10109 Upstream summary: Twisted developers reports: All HTTP clients in twisted.web.client now raise a ValueError when called with a […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: links — denial of service Related CVEs: CVE-2017-11114 Upstream summary: NIST reports: The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service […]
