Malicious code in freebsd-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9634 Malicious code in freebsd-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

FreeBSD : element-web -- Potential exposure of access token via authenticated media (851ce3e4-8b03-11ef-84e9-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 851ce3e4-8b03-11ef-84e9-901b0e9408dc advisory. Element team reports: Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can,...

FreeBSD : vscode -- Visual Studio Code for Linux Remote Code Execution Vulnerability (64e299b6-d12b-4a7a-a94f-ab133703925a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 64e299b6-d12b-4a7a-a94f-ab133703925a advisory. VSCode developers report: Visual Studio Code for Linux Remote Code Execution Vulnerability A remote cod...

FreeBSD : firefox -- use-after-free code execution (2fb13238-872d-11ef-bd1e-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2fb13238-872d-11ef-bd1e-b42e991fc52e advisory. [email protected] reports: An attacker was able to achieve code execution in the content process by...

FreeBSD : Gitlab -- vulnerabilities (cc1ac01e-86b0-11ef-9369-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cc1ac01e-86b0-11ef-9369-2cf05da270f3 advisory. Gitlab reports: Run pipelines on arbitrary branches An attacker can impersonate arbitrary user...

FreeBSD : gitea -- token missing access control for packages (79b1f4ee-860a-11ef-b2dc-cbccbf25b7ea)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 79b1f4ee-860a-11ef-b2dc-cbccbf25b7ea advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

FreeBSD : powerdns-recursor -- denial of service (8727b513-855b-11ef-9e50-6805ca2fa271)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8727b513-855b-11ef-9e50-6805ca2fa271 advisory. PowerDNS Team reports: PowerDNS Security Advisory 2024-04: Crafted responses can lead to a denial of...

FreeBSD : chromium -- multiple security fixes (7217f6e8-3ff4-4387-845d-d1744bb7f95e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7217f6e8-3ff4-4387-845d-d1744bb7f95e advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...

FreeBSD : chromium -- multiple security fixes (83117378-f773-4617-bf74-477d569dcd74)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 83117378-f773-4617-bf74-477d569dcd74 advisory. Chrome Releases reports: This update includes 4 security fixes: Tenable has extracted the...

The vulnerability of the libnv library in FreeBSD systems allows attackers to increase their privileges or cause service failures.

The vulnerability of the libnv library in FreeBSD systems is related to a potential overflow due to incorrect calculations of buffer size. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

FreeBSD : Unbound -- Denial of service attack (2368755b-83f6-11ef-8d2e-a04a5edf46d9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2368755b-83f6-11ef-8d2e-a04a5edf46d9 advisory. NLnet labs report: A vulnerability has been discovered in Unbound when handling replies with very large...

FreeBSD : zeek -- potential DoS vulnerability (fe7031d3-3000-4b43-9fa6-52c2b624b8f9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fe7031d3-3000-4b43-9fa6-52c2b624b8f9 advisory. Tim Wojtulewicz of Corelight reports: Adding to the POP3 hardening in 7.0.2, the parser now simply...

FreeBSD : jenkins -- multiple vulnerabilities (3c6f8270-3210-4e2f-ba72-a9cdca7417a0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3c6f8270-3210-4e2f-ba72-a9cdca7417a0 advisory. Jenkins Security Advisory: Exposure of multi-line secrets through error messages in Jenkins It...

FreeBSD : php -- Multiple vulnerabilities (fe5c1e7a-7eed-11ef-9533-f875a43e1796)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fe5c1e7a-7eed-11ef-9533-f875a43e1796 advisory. php.net reports: Tenable has extracted the preceding description block directly from the FreeB...

FreeBSD : firefox -- multiple vulnerabilities (0417d41a-8175-11ef-a5dc-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 0417d41a-8175-11ef-a5dc-b42e991fc52e advisory. [email protected] reports: Tenable has extracted the preceding description block directly...

FreeBSD : redis,valkey -- Multiple vulnerabilities (8b20f21a-8113-11ef-b988-08002784c58d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8b20f21a-8113-11ef-b988-08002784c58d advisory. Redis core team reports: Tenable has extracted the preceding description block directly from t...

Synology DiskStation Manager Debian Linux Race Condition (CVE-2018-8897)

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual SDM was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for DB exceptions that are deferred by MOV SS or POP SS, as demonstrated ...

FreeBSD : chromium -- multiple security fixes (2f82696c-adad-447b-9938-c99441805fa3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2f82696c-adad-447b-9938-c99441805fa3 advisory. Chrome Releases reports: This update includes 5 security fixes: Tenable has extracted the...

FreeBSD : Slixmpp -- Lack of SSL Certificate hostname validation in XMLStream (f9cfdb00-7f43-11ef-9b27-592d55dd336d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f9cfdb00-7f43-11ef-9b27-592d55dd336d advisory. NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an...