FreeBSD : git -- Multiple vulnerabilities (2523bc76-4f01-11ed-929b-002590f2a714)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2523bc76-4f01-11ed-929b-002590f2a714 advisory. - When relying on the --local clone optimization, Git dereferences symbolic links in the sourc...

FreeBSD : gitea -- multiple issues (d713d709-4cc9-11ed-a621-0800277bb8a8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d713d709-4cc9-11ed-a621-0800277bb8a8 advisory. - The Gitea team reports: Sanitize and Escape refs in git backend Bump golang.org/x/text Update...

FreeBSD : roundcube-thunderbird_labels -- RCE with custom label titles (127674c6-4a27-11ed-9f93-002b67dfc673)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 127674c6-4a27-11ed-9f93-002b67dfc673 advisory. - The Roundcube project reports: Remote code execution vulnerability in roundcube- thunderbirdlabels wh...

FreeBSD : chromium -- mulitple vulnerabilities (7cb12ee0-4a13-11ed-8ad9-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7cb12ee0-4a13-11ed-8ad9-3065ec8fd3ec advisory. - Use after free in Skia. CVE-2022-3445 - Heap buffer overflow in WebSQL. CVE-2022-3446 -...

FreeBSD : samba -- Multiple vulnerabilities (f9140ad4-4920-11ed-a07e-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f9140ad4-4920-11ed-a07e-080027f5fec9 advisory. - A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd servic...

FreeBSD : strongswan -- DOS attack vulnerability (0ae56f3e-488c-11ed-bb31-b42e99a1b9c3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0ae56f3e-488c-11ed-bb31-b42e99a1b9c3 advisory. - Lahav Schlesinger reported a bug related to online certificate revocation checking that can lead to a...

FreeBSD : routinator -- potential DOS attack (e4133d8b-ab33-451a-bc68-3719de73d54a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e4133d8b-ab33-451a-bc68-3719de73d54a advisory. - In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data i...

CVE-2022-40895

In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthenticated, remote attacker to affect the integrity of a device via a User Enumeration vulnerability. The vulnerability is due to insecure design, where a difference in forgot password...

Design/Logic Flaw

In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthenticated, remote attacker to affect the integrity of a device via a User Enumeration vulnerability. The vulnerability is due to insecure design, where a difference in forgot password...

CVE-2022-40895

In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthenticated, remote attacker to affect the integrity of a device via a User Enumeration vulnerability. The vulnerability is due to insecure design, where a difference in forgot password...

CVE-2022-40895

CVE-2022-40895 affects NeDi’s web UI login and Community login, where an insecure design in the forgot-password flow enables unauthenticated, remote user enumeration and brute-force attempts against valid usernames. Reported impact is integrity compromise for affected devices; attack vector is ne...

FreeBSD : Django -- multiple vulnerabilities (f4f15051-4574-11ed-81a1-080027881239)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f4f15051-4574-11ed-81a1-080027881239 advisory. - Django reports: CVE-2022-41323: Potential denial-of-service vulnerability in internationalized URLs...

FreeBSD : jenkins -- XSS vulnerability (c2a89e8f-44e9-11ed-9215-00e081b7aa2d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c2a89e8f-44e9-11ed-9215-00e081b7aa2d advisory. - Jenkins 2.367 through 2.369 both inclusive does not escape tooltips of the l:helpIcon UI component us...

FreeBSD : zydis -- heap buffer overflow (d487d4fc-43a8-11ed-8b01-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d487d4fc-43a8-11ed-8b01-b42e991fc52e advisory. - Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the...

FreeBSD : go -- multiple vulnerabilities (854c2afb-4424-11ed-af97-adcabf310f9b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 854c2afb-4424-11ed-af97-adcabf310f9b advisory. - The Go project reports: archive/tar: unbounded memory consumption when reading headers...

FreeBSD : mediawiki -- multiple vulnerabilities (67057b48-41f4-11ed-86c3-080027881239)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 67057b48-41f4-11ed-86c3-080027881239 advisory. - Mediawiki reports: T316304, CVE-2022-41767 SECURITY: reassignEdits doesn't update results in...

FreeBSD : Gitlab -- Multiple vulnerabilities (04422df1-40d8-11ed-9be7-454b1dd82c64)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 04422df1-40d8-11ed-9be7-454b1dd82c64 advisory. - Gitlab reports: Denial of Service via cloning an issue Arbitrary PUT request as victim user...

FreeBSD : chromium -- multiple vulnerabilities (d459c914-4100-11ed-9bc7-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d459c914-4100-11ed-9bc7-3065ec8fd3ec advisory. - Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker ...

FreeBSD : unbound -- Non-Responsive Delegation Attack (5a1c2e06-3fb7-11ed-a402-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5a1c2e06-3fb7-11ed-a402-b42e991fc52e advisory. - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in...

Researchers Warn of New Go-based Malware Targeting Windows and Linux Systems

A new, multi-functional Go-based malware dubbed Chaos has been rapidly growing in volume in recent months to ensnare a wide range of Windows, Linux, small office/home office SOHO routers, and enterprise servers into its botnet. "Chaos functionality includes the ability to enumerate the host...