🟢 Low ⏱ 5–15 min Last verified: 26 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: viewcvs — information leakage Related CVEs: CVE-2004-0915 Upstream summary: The hide_cvsroot and forbidden configuration options are not properly honored by viewcvs when exporting to a tar file which can lead […]
🟡 Medium ⏱ 10–30 min Last verified: 26 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-6834 CVE-2015-6835 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Upstream summary: PHP reports: Core: Fixed bug #70172 (Use After Free Vulnerability in unserialize()). Fixed bug #70219 (Use after […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Carrierwave — Multiple vulnerabilities Related CVEs: CVE-2021-21288 CVE-2021-21305 Upstream summary: Community reports: Fix Code Injection vulnerability in CarrierWave::RMagick Fix SSRF vulnerability in the remote file download feature Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]
🟠 High ⏱ 15–60 min Last verified: 26 December 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: DNSSEC validators — denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilities Related CVEs: CVE-2015-3193 CVE-2015-8000 CVE-2015-8461 CVE-2016-1285 CVE-2016-1286 CVE-2016-2088 CVE-2016-2775 CVE-2016-2776 +12 more Upstream summary: Simon Kelley reports: If DNSSEC validation […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Dancer — possible to abuse session cookie values Upstream summary: Russell Jenkins reports: It was possible to abuse session cookie values so that file-based session stores such as Dancer::Session::YAML or […]
🟠 High ⏱ 15–60 min Last verified: 26 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpbb3 — multiple issues Related CVEs: CVE-2004-1315 CVE-2005-0258 CVE-2005-0259 CVE-2005-2086 CVE-2005-3310 CVE-2005-3415 CVE-2005-3416 CVE-2005-3417 +6 more Upstream summary: phpbb developers reports: Password updater working with PostgreSQL – The cron for […]
🟠 High ⏱ 15–60 min Last verified: 26 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tcpdump — multiple vulnerabilities Related CVEs: CVE-2003-0989 CVE-2003-1029 CVE-2004-0057 CVE-2004-0183 CVE-2004-0184 CVE-2005-1267 CVE-2005-1278 CVE-2005-1279 +12 more Upstream summary: tcpdump developers report: Too many issues to detail, see CVE references for […]
🟡 Medium ⏱ 10–30 min Last verified: 25 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: chrony <= 3.5.1 data corruption through symlink vulnerability writing the pidfile Related CVEs: CVE-2015-1821 CVE-2015-1822 CVE-2015-1853 CVE-2020-14367 Upstream summary: Miroslav Lichvar reports: chrony-3.5.1 […] fixes a security issue in writing […]
