FreeBSD : piwigo -- SQL injection (ec63bc8e-f092-11ed-85ca-001517a2e1a4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ec63bc8e-f092-11ed-85ca-001517a2e1a4 advisory. - Piwigo reports: Piwigo is affected by multiple SQL injection issues...

FreeBSD : postgresql-server -- Row security policies disregard user ID changes after inlining (4b636f50-f011-11ed-bbae-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4b636f50-f011-11ed-bbae-6cc21735f730 advisory. - Row security policies disregard user ID changes after inliningmore details CVE-2023-2455 Note that...

FreeBSD : vscode -- Visual Studio Code Information Disclosure Vulnerability (7913fe6d-2c6e-40ba-a7d7-35696f3db2b6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7913fe6d-2c6e-40ba-a7d7-35696f3db2b6 advisory. - Visual Studio Code Information Disclosure Vulnerability CVE-2023-29338 Note that Nessus has not teste...

Denial Of Services (DoS)

Netatalk is vulnerable to Denial Of Services DoS. The vulnerability exists due to the heap-based buffer overflow in afpgetappl, resulting in code execution through the .appl file, allowing an attacker to cause an application crash and access root on some platforms such as FreeBSD used for TrueNAS...

FreeBSD : redis -- HINCRBYFLOAT can be used to crash a redis-server process (96b2d4db-ddd2-11ed-b6ea-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 96b2d4db-ddd2-11ed-b6ea-080027f5fec9 advisory. - Redis is an open source, in-memory database that persists on disk. Authenticated users can use the...

FreeBSD : Gitlab -- Multiple Vulnerabilities (89fdbd85-ebd2-11ed-9c88-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 89fdbd85-ebd2-11ed-9c88-001b217b3468 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.9.7,...

FreeBSD : Django -- multiple vulnerabilities (d55e1b4d-eadc-11ed-9cc0-080027de9982)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d55e1b4d-eadc-11ed-9cc0-080027de9982 advisory. - Django reports: CVE-2023-31047: Potential bypass of validation when uploading multiple files using on...

FreeBSD : chromium -- multiple vulnerabilities (246174d3-e979-11ed-8290-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 246174d3-e979-11ed-8290-a8a1599412c6 advisory. - Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a...

FreeBSD : Gitlab -- Multiple Vulnerabilities (4ffcccae-e924-11ed-9c88-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4ffcccae-e924-11ed-9c88-001b217b3468 advisory. - An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions...

FreeBSD : cloud-init -- sensitive data exposure in cloud-init logs (02562a78-e6b7-11ed-b0ce-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 02562a78-e6b7-11ed-b0ce-b42e991fc52e advisory. - Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use th...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current netatalk Multiple Vulnerabilities (SSA:2023-121-01)

The version of netatalk installed on the remote host is prior to 3.1.12 / 3.1.15. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-121-01 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

FreeBSD : h2o -- Malformed HTTP/1.1 causes Out-of-Memory Denial of Service (4da51989-5a8b-4eb9-b442-46d94ec0802d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4da51989-5a8b-4eb9-b442-46d94ec0802d advisory. - H2O is an HTTP server. In versions 2.3.0-beta2 and prior, when the reverse proxy handler tries to...

OESA-2023-1263 screen security update

Screen is a full-screen window manager that multiplexes a physical terminal between several processes,typically interactive shells. Security Fixes: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to...

FreeBSD : Grafana -- Exposure of sensitive information to an unauthorized actor (5e257b0d-e466-11ed-834b-6c3be5272acd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5e257b0d-e466-11ed-834b-6c3be5272acd advisory. - Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch,...

FreeBSD : Grafana -- Critical vulnerability in golang (0b85b1cd-e468-11ed-834b-6c3be5272acd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0b85b1cd-e468-11ed-834b-6c3be5272acd advisory. - Templates do not properly consider backticks as Javascript string delimiters, and do not escape them ...

FreeBSD : element-web -- matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting (c676bb1b-e3f8-11ed-b37b-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c676bb1b-e3f8-11ed-b37b-901b0e9408dc advisory. - matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior ...

FreeBSD : git -- Multiple vulnerabilities (d2c6173f-e43b-11ed-a1d7-002590f2a714)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d2c6173f-e43b-11ed-a1d7-002590f2a714 advisory. - Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8,...

FreeBSD : jellyfin -- Multiple vulnerabilities (4ee322e9-e363-11ed-b934-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4ee322e9-e363-11ed-b934-b42e991fc52e advisory. - Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10...

FreeBSD : MySQL -- Multiple vulnerabilities (f504a8d2-e105-11ed-85f6-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f504a8d2-e105-11ed-85f6-84a93843eb75 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in...

FreeBSD : phpmyfaq -- multiple vulnerabilities (bb528d7c-e2c6-11ed-a3e6-589cfc0f81b0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bb528d7c-e2c6-11ed-a3e6-589cfc0f81b0 advisory. - phpmyfaq developers report: XSS email address manipulation bb528d7c-e2c6-11ed-a3e6-589cfc0f81b0 Note...