FreeBSD

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cassandra3 — multiple vulnerabilities Related CVEs: CVE-2015-0225 CVE-2015-0886 CVE-2019-2684 CVE-2020-7238 CVE-2021-44521 CVE-2022-24823 CVE-2022-25857 CVE-2022-42003  +1 more Upstream summary: Cassandra tema reports: This release contains 6 security fixes including CVE-2022-24823: When […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Slixmpp — Lack of SSL Certificate hostname validation in XMLStream Related CVEs: CVE-2022-45197 Upstream summary: NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 April 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Security Vulnerability found in ExifTool leading to RCE Related CVEs: CVE-2021-22204 CVE-2022-23935 Upstream summary: Debian Security tracker reports: ExifTool.pm in ExifTool before 12.38 mishandles a file special characters check, leading […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 April 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: graphics/webp heap buffer overflow Related CVEs: CVE-2023-4863 Upstream summary: Google Chrome reports: Heap buffer overflow in WebP … allowed a remote attacker to perform an out of bounds memory write […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libqb — Buffer overflow Related CVEs: CVE-2023-39976 Upstream summary: [email protected] reports: log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not […]

🟠 High   ⏱ 15–60 min  Last verified: 23 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2018-16984 CVE-2019-11358 CVE-2019-12308 CVE-2019-12781 CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235  +12 more Upstream summary: Django reports: CVE-2023-31047: Potential bypass of validation when uploading multiple files using […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-dparse — REDoS vulnerability Related CVEs: CVE-2022-39280 Upstream summary: yeisonvargasf reports: dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Configobj — Regular Expression Denial of Service attack Related CVEs: CVE-2023-26112 Upstream summary: [email protected] reports: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 April 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libspf2 — Integer Underflow Remote Code Execution Related CVEs: CVE-2008-2469 CVE-2023-42118 Upstream summary: Trendmicro ZDI reports: Integer Underflow Remote Code Execution Vulnerability The specific flaw exists within the parsing of […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 April 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: QtNetwork — potential buffer overflow Related CVEs: CVE-2023-51714 Upstream summary: Andy Shaw reports: A potential integer overflow has been discovered in Qt's HTTP2 implementation. If the HTTP2 implementation receives more […]