FreeBSD : Intel CPUs -- multiple vulnerabilities (b6dd9d93-e09b-11ee-92fc-1c697a616631)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b6dd9d93-e09b-11ee-92fc-1c697a616631 advisory. - Intel reports: 2024.1 IPU - Intel Processor Bus Lock Advisory A potential security...

FreeBSD : Unbound -- Denial-of-Service vulnerability (c2ad8700-de25-11ee-9190-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c2ad8700-de25-11ee-9190-84a93843eb75 advisory. - NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can...

FreeBSD : electron{27,28} -- vulnerability in libxml2 (e74da31b-276a-4a22-9772-17dd42b97559)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e74da31b-276a-4a22-9772-17dd42b97559 advisory. - An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader...

FreeBSD : Gitlab -- Vulnerabilities (b2caae55-dc38-11ee-96dc-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b2caae55-dc38-11ee-96dc-001b217b3468 advisory. - An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior...

FreeBSD : go -- multiple vulnerabilities (b1b039ec-dbfc-11ee-9165-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b1b039ec-dbfc-11ee-9165-901b0e9408dc advisory. - When following an HTTP redirect to a domain which is not a subdomain match or exact match of...

FreeBSD : chromium -- multiple security fixes (fd3401a1-b6df-4577-917a-2c22fee99d34)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fd3401a1-b6df-4577-917a-2c22fee99d34 advisory. - Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote...

FreeBSD : Django -- multiple vulnerabilities (0ef3398e-da21-11ee-b23a-080027a5b8e9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0ef3398e-da21-11ee-b23a-080027a5b8e9 advisory. - Django reports: CVE-2024-27351: Potential regular expression denial-of-service in...

FreeBSD : NodeJS -- Vulnerabilities (77a6f1c9-d7d2-11ee-bb12-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 77a6f1c9-d7d2-11ee-bb12-001b217b3468 advisory. - The Node.js Permission Model does not clarify in the documentation that wildcards should be...

FreeBSD : electron{27,28} -- Use after free in Mojo (3567456a-6b17-41f7-ba7f-5cd3efb2b7c9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3567456a-6b17-41f7-ba7f-5cd3efb2b7c9 advisory. - Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potential...

FreeBSD : chromium -- multiple security fixes (31bb1b8d-d6dc-11ee-86bb-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 31bb1b8d-d6dc-11ee-86bb-a8a1599412c6 advisory. - Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to...

Stack buffer overflow with whoami on several Unix platforms

With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...

RUSTSEC-2024-0020 Stack buffer overflow with whoami on several Unix platforms

With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...

FreeBSD : curl -- OCSP verification bypass with TLS session reuse (02e33cd1-c655-11ee-8613-08002784c58d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 02e33cd1-c655-11ee-8613-08002784c58d advisory. - curl inadvertently kept the SSL session ID for connections in its cache even when the verify status...

bhyveload FreeBSD Unauthorized Access

The vulnerability of the bhyveload module in FreeBSD is related to an incorrect limitation on the path name to the host-path directory with restricted access. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information by loading a specially crafted...

FreeBSD : gitea -- Fix XSS vulnerabilities (5ecfb588-d2f4-11ee-ad82-dbdfaa8acfc2)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5ecfb588-d2f4-11ee-ad82-dbdfaa8acfc2 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

FreeBSD : Grafana -- Email verification is not required after email change (6a851dc0-cfd2-11ee-ac09-6c3be5272acd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6a851dc0-cfd2-11ee-ac09-6c3be5272acd advisory. - A user changing their email after signing up and verifying it can change it without verification in...

FreeBSD : chromium -- multiple security fixes (2a470712-d351-11ee-86bb-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2a470712-d351-11ee-86bb-a8a1599412c6 advisory. - Chrome Releases reports: This update includes 12 security fixes: 2a470712-d351-11ee-86bb-a8a1599412c6...

FreeBSD : dns/c-ares -- malformatted file causes application crash (255bf44c-d298-11ee-9c27-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 255bf44c-d298-11ee-9c27-40b034429ecf advisory. - c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuratio...

FreeBSD : electron27 -- multiple vulnerabilities (80ad6d6c-b398-457f-b88f-bf6be0bbad44)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 80ad6d6c-b398-457f-b88f-bf6be0bbad44 advisory. - Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote...

FreeBSD : suricata -- multiple vulnerabilities (979dc373-d27d-11ee-8b84-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 979dc373-d27d-11ee-8b84-b42e991fc52e advisory. - Suricata team reports: Multiple vulnerabilities fixed in the last release of suricata. No...