🟢 Low ⏱ 5–15 min Last verified: 18 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: uwsgi — a stack-based buffer overflow Related CVEs: CVE-2018-6758 Upstream summary: Uwsgi developers report: It was discovered that the uwsgi_expand_path function in utils.c in Unbit uWSGI, an application container server, […]
🟢 Low ⏱ 5–15 min Last verified: 18 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: borgbackup — remote users can override repository restrictions Related CVEs: CVE-2017-15914 Upstream summary: BorgBackup reports: Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers. […]
🟢 Low ⏱ 5–15 min Last verified: 18 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: eperl — Remote code execution Related CVEs: CVE-2001-0733 Upstream summary: David Madison reports: ePerl is a multipurpose Perl filter and interpreter program for Unix systems. The ePerl preprocessor contains an […]
🟢 Low ⏱ 5–15 min Last verified: 17 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde — XSS vulnerabilities Related CVEs: CVE-2015-8807 CVE-2016-2228 Upstream summary: The Horde Team reports: Fixed XSS vulnerabilities in menu bar and form renderer. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 17 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nagios — denial of service vulnerability Related CVEs: CVE-2007-5803 CVE-2008-5027 CVE-2009-2288 CVE-2012-6096 CVE-2013-7108 CVE-2013-7205 Upstream summary: Eric Stanley reports: Most CGIs previously incremented the input variable counter twice when it […]
🟡 Medium ⏱ 10–30 min Last verified: 17 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — unbounded recursion in urlpreview Related CVEs: CVE-2019-5885 CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 Upstream summary: Matrix developers report: This release fixes a vulnerability with Synapse's URL preview […]
🟢 Low ⏱ 5–15 min Last verified: 17 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PowerDNS — Denial of Service Vulnerability Related CVEs: CVE-2012-0206 Upstream summary: The PowerDNS Team reports: Using well crafted UDP packets, one or more PowerDNS servers could be made to enter […]
🟢 Low ⏱ 5–15 min Last verified: 16 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Arbitrary code execution via a format string vulnerability in jftpgw Related CVEs: CVE-2004-0448 Upstream summary: The log functions in jftpgw may allow remotely authenticated user to execute arbitrary code via […]
🟢 Low ⏱ 5–15 min Last verified: 16 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache Maven — multiple vulnerabilities Related CVEs: CVE-2020-13956 CVE-2021-26291 Upstream summary: The Apache Maven project reports: We received a report from Jonathan Leitschuh about a vulnerability of custom repositories in […]
🟢 Low ⏱ 5–15 min Last verified: 16 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: testdisk — buffer overflow with malicious disk image Upstream summary: CGSecurity TestDisk Changelog reports: Various fix including security fix, thanks to: Coverity scan (Static Analysis of source code) afl-fuzz (security-oriented […]
