🟡 Medium ⏱ 10–30 min Last verified: 22 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h2o — HTTP/2 Rapid Reset attack vulnerability Related CVEs: CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2021-43848 CVE-2023-30847 CVE-2023-44487 Upstream summary: Kazuo Okuhu reports: H2O is vulnerable to the HTTP/2 Rapid Reset attack. An […]
🟡 Medium ⏱ 10–30 min Last verified: 22 May 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: puppetdb — Potential SQL injection Related CVEs: CVE-2020-14060 CVE-2020-14061 CVE-2020-14062 CVE-2020-14195 CVE-2020-7943 CVE-2020-9548 CVE-2021-27021 CVE-2022-31197 Upstream summary: Puppet reports: The org.postgresql/postgresql driver has been updated to version 42.4.1 to address […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A user with a […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rsyslog8 — heap buffer overflow on receiving TCP syslog Related CVEs: CVE-2014-3634 CVE-2022-24903 Upstream summary: Rainer Gerhards reports: Modules for TCP syslog reception have a heap buffer overflow when octet-counted […]
🟠 High ⏱ 15–60 min Last verified: 20 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Multiple vulnerabilities Related CVEs: CVE-2021-46669 CVE-2022-27376 CVE-2022-27377 CVE-2022-27378 CVE-2022-27379 CVE-2022-27380 CVE-2022-27381 CVE-2022-27382 +12 more Upstream summary: The MariaDB project reports: See linked CVE's for details. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 20 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: 11/libX11 multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: The X.Org project reports: CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms() When libX11 is […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Slixmpp — Lack of SSL Certificate hostname validation in XMLStream Related CVEs: CVE-2022-45197 Upstream summary: NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cryptography — includes a vulnerable copy of OpenSSL Related CVEs: CVE-2023-0286 CVE-2023-23931 Upstream summary: pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography […]
🟡 Medium ⏱ 10–30 min Last verified: 16 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: slurm-wlm — Several security issues Related CVEs: CVE-2018-7033 CVE-2023-49933 CVE-2023-49934 CVE-2023-49935 CVE-2023-49936 CVE-2023-49937 CVE-2023-49938 Upstream summary: Slurm releases notes: Description CVE-2023-49933 through CVE-2023-49938 Slurm versions 23.11.1, 23.02.7, 22.05.11 are now […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Qt5 — QProcess unexpected search path Related CVEs: CVE-2022-25255 Upstream summary: The Qt Company reports: Recently, the Qt Project's security team was made aware of an issue regarding QProcess and […]
