Logging Monitoring

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_pagespeed — critical cross-site scripting (XSS) vulnerability Related CVEs: CVE-2012-4001 CVE-2012-4360 CVE-2013-6111 Upstream summary: mod_pagespeed developers report: Various versions of mod_pagespeed are subject to critical cross-site scripting (XSS) vulnerability, CVE-2013-6111. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Composer — Multiple command injections via malicious git/hg branch names Related CVEs: CVE-2022-24828 CVE-2023-43655 CVE-2024-24821 CVE-2024-35241 CVE-2024-35242 Upstream summary: Composer project reports: The status, reinstall and remove commands with packages […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: BIND,Knot,NSD,PowerDNS — denial over service via oversized zone transfers Related CVEs: CVE-2016-6170 CVE-2016-6171 CVE-2016-6172 CVE-2016-6173 Upstream summary: ISC reports: DNS protocols were designed with the assumption that a certain amount […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: TeamSpeak Server 3 — Multiple vulnerabilities including Remote Code Execution Upstream summary: Hanz Jenson audit report: I found 10 vulnerabilities. Some of these are critical and allow remote code execution. […]