Записи FreeBSD
641 опубликованных записей вендора freebsd.
Профиль для исследователя
- Попали в KEV
- 1 · 0,2 %
- С эксплойтом
- 13 · 2 %
- Pre-auth RCE
- 54
- С записью об исправлении
- 37,1 %
- Медиана: публикация → KEV
- 6 дн.
Повторяющиеся классы
- CWE-20 Improper Input Validation34
- CWE-264 Permissions, Privileges, and Access Controls31
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer26
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor22
- CWE-416 Use After Free20
- CWE-787 Out-of-bounds Write19
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
641 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
69На этой неделе | CVE-2011-4862Готовый эксплойт | Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and mit · krb5-appl · CWE-120 | Критическая10,0 | — | 95,0 % | 24 дек. 2011 г. |
65На этой неделе | CVE-2026-106931Готовый эксплойт | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with re-guardian · siteguard · CWE-78 | Высокая8,5 | KEV | 2,5 % | 14 окт. 2026 г. |
63На этой неделе | CVE-2020-13160Готовый эксплойт | AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.anydesk · anydesk · CWE-134 | Критическая9,8 | — | 80,6 % | 9 июн. 2020 г. |
62На этой неделе | CVE-2024-6387Proof of concept | Openssh: regresshion - race condition in ssh allows rce/dossonicwall · sma 6200 firmware · CWE-364 | Высокая8,1 | — | 99,5 % | 1 июл. 2024 г. |
62На этой неделе | CVE-2003-0466Proof of concept | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code,redhat · wu ftpd · CWE-193 | Критическая9,8 | — | 78,1 % | 27 авг. 2003 г. |
60На этой неделе | CVE-2007-3798Proof of concept | Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via craftcpdump · tcpdump · CWE-252 | Критическая9,8 | — | 70,3 % | 16 июл. 2007 г. |
60На этой неделе | CVE-2003-0694Готовый эксплойт | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated usingsendmail · advanced message server | Критическая10,0 | — | 66,1 % | 6 окт. 2003 г. |
60На этой неделе | CVE-2020-7457Готовый эксплойт | In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before pfreebsd · freebsd · CWE-362 | Высокая8,1 | — | 33,1 % | 9 июл. 2020 г. |
56В плане | CVE-2002-0391Эксплойта нет | Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including disun · solaris · CWE-190 | Критическая9,8 | — | 58,1 % | 12 авг. 2002 г. |
56В плане | CVE-1999-0046Proof of concept | Buffer overflow of rlogin program using TERM environmental variable.bsdi · bsd os · CWE-120 | Критическая10,0 | — | 51,8 % | 6 февр. 1997 г. |
52В плане | CVE-2001-0554Proof of concept | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a mit · kerberos · CWE-120 | Критическая10,0 | — | 38,7 % | 14 авг. 2001 г. |
51В плане | CVE-2023-48795Proof of concept | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypasssh · ssh · CWE-354 | Средняя5,9 | — | 93,5 % | 18 дек. 2023 г. |
51В плане | CVE-2006-0900Готовый эксплойт | nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the Protfreebsd · freebsd | Высокая7,8 | — | 65,0 % | 27 февр. 2006 г. |
46В плане | CVE-2020-1967Proof of concept | Segmentation fault in SSL_check_chainopenssl · openssl · CWE-476 | Высокая7,5 | — | 53,3 % | 21 апр. 2020 г. |
46В плане | CVE-2018-17157Эксплойта нет | In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sfreebsd · freebsd · CWE-190 | Критическая9,8 | — | 24,1 % | 4 дек. 2018 г. |
46В плане | CVE-2001-0247Proof of concept | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} semit · kerberos 5 | Критическая10,0 | — | 19,3 % | 18 июн. 2001 г. |
45В плане | CVE-2005-0356Proof of concept | Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackecisco · agent desktop | Средняя5,0 | — | 82,7 % | 31 мая 2005 г. |
44В плане | CVE-2010-1938Proof of concept | Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-Pfreebsd · freebsd · CWE-189 | Критическая9,3 | — | 22,0 % | 28 мая 2010 г. |
44В плане | CVE-2008-0122Эксплойта нет | Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASisc · bind · CWE-189 | Критическая10,0 | — | 12,3 % | 15 янв. 2008 г. |
44В плане | CVE-2006-4304Эксплойта нет | Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before freebsd · freebsd | Критическая10,0 | — | 11,9 % | 23 авг. 2006 г. |
43В плане | CVE-2009-4502Готовый эксплойт | The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass thezabbix · zabbix · CWE-264 | Критическая9,3 | — | 21,5 % | 31 дек. 2009 г. |
42В плане | CVE-2003-0001Proof of concept | Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain inffreebsd · freebsd · CWE-200 | Средняя5,0 | — | 72,5 % | 17 янв. 2003 г. |
42В плане | CVE-2021-3449Proof of concept | NULL pointer deref in signature_algorithms processingopenssl · openssl · CWE-476 | Средняя5,9 | — | 63,5 % | 25 мар. 2021 г. |
42В плане | CVE-2008-2427Proof of concept | Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted freebsd · freebsd · CWE-119 | Критическая9,3 | — | 16,0 % | 24 июн. 2008 г. |
42В плане | CVE-2018-7183Эксплойта нет | Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leverntp · ntp · CWE-787 | Критическая9,8 | — | 10,2 % | 8 мар. 2018 г. |
- CVE-2011-486269На этой неделе
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and
КритическаяCVSS 10,0Готовый эксплойтEPSS 95 %mit · krb5-appl24 дек. 2011 г.
- CVE-2026-10693165На этой неделе
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with r
ВысокаяCVSS 8,5KEVГотовый эксплойтEPSS 2 %e-guardian · siteguard14 окт. 2026 г.
- CVE-2020-1316063На этой неделе
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.
КритическаяCVSS 9,8Готовый эксплойтEPSS 80 %anydesk · anydesk9 июн. 2020 г.
- CVE-2024-638762На этой неделе
Openssh: regresshion - race condition in ssh allows rce/dos
ВысокаяCVSS 8,1Proof of conceptEPSS 99 %sonicwall · sma 6200 firmware1 июл. 2024 г.
- CVE-2003-046662На этой неделе
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code,
КритическаяCVSS 9,8Proof of conceptEPSS 78 %redhat · wu ftpd27 авг. 2003 г.
- CVE-2007-379860На этой неделе
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via craf
КритическаяCVSS 9,8Proof of conceptEPSS 70 %tcpdump · tcpdump16 июл. 2007 г.
- CVE-2003-069460На этой неделе
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using
КритическаяCVSS 10,0Готовый эксплойтEPSS 66 %sendmail · advanced message server6 окт. 2003 г.
- CVE-2020-745760На этой неделе
In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p
ВысокаяCVSS 8,1Готовый эксплойтEPSS 33 %freebsd · freebsd9 июл. 2020 г.
- CVE-2002-039156В плане
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including di
КритическаяCVSS 9,8Эксплойта нетEPSS 58 %sun · solaris12 авг. 2002 г.
- CVE-1999-004656В плане
Buffer overflow of rlogin program using TERM environmental variable.
КритическаяCVSS 10,0Proof of conceptEPSS 51 %bsdi · bsd os6 февр. 1997 г.
- CVE-2001-055452В плане
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a
КритическаяCVSS 10,0Proof of conceptEPSS 38 %mit · kerberos14 авг. 2001 г.
- CVE-2023-4879551В плане
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas
СредняяCVSS 5,9Proof of conceptEPSS 93 %ssh · ssh18 дек. 2023 г.
- CVE-2006-090051В плане
nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the Prot
ВысокаяCVSS 7,8Готовый эксплойтEPSS 65 %freebsd · freebsd27 февр. 2006 г.
- CVE-2020-196746В плане
Segmentation fault in SSL_check_chain
ВысокаяCVSS 7,5Proof of conceptEPSS 53 %openssl · openssl21 апр. 2020 г.
- CVE-2018-1715746В плане
In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by s
КритическаяCVSS 9,8Эксплойта нетEPSS 24 %freebsd · freebsd4 дек. 2018 г.
- CVE-2001-024746В плане
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} se
КритическаяCVSS 10,0Proof of conceptEPSS 19 %mit · kerberos 518 июн. 2001 г.
- CVE-2005-035645В плане
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attacke
СредняяCVSS 5,0Proof of conceptEPSS 82 %cisco · agent desktop31 мая 2005 г.
- CVE-2010-193844В плане
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-P
КритическаяCVSS 9,3Proof of conceptEPSS 22 %freebsd · freebsd28 мая 2010 г.
- CVE-2008-012244В плане
Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEAS
КритическаяCVSS 10,0Эксплойта нетEPSS 12 %isc · bind15 янв. 2008 г.
- CVE-2006-430444В плане
Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before
КритическаяCVSS 10,0Эксплойта нетEPSS 11 %freebsd · freebsd23 авг. 2006 г.
- CVE-2009-450243В плане
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the
КритическаяCVSS 9,3Готовый эксплойтEPSS 21 %zabbix · zabbix31 дек. 2009 г.
- CVE-2003-000142В плане
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain inf
СредняяCVSS 5,0Proof of conceptEPSS 72 %freebsd · freebsd17 янв. 2003 г.
- CVE-2021-344942В плане
NULL pointer deref in signature_algorithms processing
СредняяCVSS 5,9Proof of conceptEPSS 63 %openssl · openssl25 мар. 2021 г.
- CVE-2008-242742В плане
Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted
КритическаяCVSS 9,3Proof of conceptEPSS 16 %freebsd · freebsd24 июн. 2008 г.
- CVE-2018-718342В плане
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by lever
КритическаяCVSS 9,8Эксплойта нетEPSS 10 %ntp · ntp8 мар. 2018 г.