Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-9458 State: PUBLISHED Published: 2019-09-06T21:49:41 Last Updated: 2024-08-04T21:46:30.339Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-09-01 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html
CVE ID: CVE-2019-9459 State: PUBLISHED Published: 2019-09-27T18:05:19 Last Updated: 2024-08-04T21:46:30.330Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9460 State: REJECTED Published: 2019-09-27T18:05:19 Last Updated: 2020-03-17T19:24:35 Description: No description available.
CVE ID: CVE-2019-9461 State: PUBLISHED Published: 2019-09-06T21:43:01 Last Updated: 2024-08-04T21:46:30.537Z Vendors: n/a Products: Android Problem Types: In the Android kernel information disclosure Description: In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information disclosure by an adjacent network attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-09-01 - http://www.openwall.com/lists/oss-security/2019/12/05/1 - http://www.openwall.com/lists/oss-securit
n/pixel/2019-09-01 - http://www.openwall.com/lists/oss-security/2019/12/05/1 - http://www.openwall.com/lists/oss-security/2019/12/05/2 - http://www.openwall.com/lists/oss-security/2019/12/08/1
CVE ID: CVE-2019-9462 State: PUBLISHED Published: 2019-09-27T18:05:19 Last Updated: 2024-08-04T21:46:30.621Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-91544774 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9463 State: PUBLISHED Published: 2019-09-27T18:05:19 Last Updated: 2024-08-04T21:46:30.560Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9464 State: PUBLISHED Published: 2019-12-06T22:40:39 Last Updated: 2024-08-04T21:54:43.554Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app accessed the user's location. This could dissolve the trust in the platform's permission system, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141028068 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/
id ID: A-141028068 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-12-01
CVE ID: CVE-2019-9465 State: PUBLISHED Published: 2020-01-07T18:07:47 Last Updated: 2024-08-04T21:54:43.492Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-133258003 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-12-01
CVE ID: CVE-2019-9466 State: REJECTED Published: 2019-11-13T19:48:19 Last Updated: 2019-12-06T21:54:12 Description: No description available.
CVE ID: CVE-2019-9467 State: PUBLISHED Published: 2019-11-13T19:48:07 Last Updated: 2024-08-04T21:54:43.518Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-80316910 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-11-01
CVE ID: CVE-2019-9468 State: PUBLISHED Published: 2020-01-06T17:26:00 Last Updated: 2024-08-04T21:54:43.517Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-139683471 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-12-01
CVE ID: CVE-2019-9469 State: PUBLISHED Published: 2020-01-06T17:25:56 Last Updated: 2024-08-04T21:54:43.521Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-130246677 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-12-01
CVE ID: CVE-2019-9470 State: PUBLISHED Published: 2020-01-06T17:25:48 Last Updated: 2024-08-04T21:54:43.511Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-144167528 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-12-01
CVE ID: CVE-2019-9471 State: PUBLISHED Published: 2020-01-06T17:25:42 Last Updated: 2024-08-04T21:54:43.514Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-144168326 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-12-01
CVE ID: CVE-2019-9472 State: PUBLISHED Published: 2020-01-06T17:25:37 Last Updated: 2024-08-04T21:54:43.523Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-130237611 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-12-01
CVE ID: CVE-2019-9473 State: PUBLISHED Published: 2020-03-15T21:17:24 Last Updated: 2024-08-04T21:54:43.553Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-115363533 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9474 State: PUBLISHED Published: 2020-03-15T21:17:56 Last Updated: 2024-08-04T21:54:44.025Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-79996267 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9475 State: PUBLISHED Published: 2021-06-11T16:36:52 Last Updated: 2024-08-04T21:54:44.181Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-9496886 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9482 State: PUBLISHED Published: 2019-03-01T05:00:00 Last Updated: 2024-08-04T21:54:44.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/c69969329d197bcdd04832b03310fa73f4eb7155
CVE ID: CVE-2019-9483 State: PUBLISHED Published: 2019-03-01T05:00:00 Last Updated: 2024-08-04T21:54:43.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door. Additional Analyst Notes: - CVE Program Container: References: - https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts - https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/
CVE ID: CVE-2019-9484 State: PUBLISHED Published: 2019-03-01T06:00:00 Last Updated: 2024-08-04T21:54:44.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password (which is 1234), or reconfiguring "party mode" or "vacation mode." Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40SergiuSechel/insecure-permissions-in-glen-dimplex-deutschland-gmbh-implementation-of-carel-pcoweb-configuration-ca3896f24835
CVE ID: CVE-2019-9485 State: PUBLISHED Published: 2019-05-29T16:08:14 Last Updated: 2024-08-04T21:54:43.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/
CVE ID: CVE-2019-9486 State: PUBLISHED Published: 2019-04-30T18:27:33 Last Updated: 2024-08-04T21:54:43.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject and execute code by hijacking the insecure communications with the service. This vulnerability also affects Telekom MagentaCLOUD through 5.7.0.0 and 1&1 Online Storage through 6.1.0.0. Additional Analyst Notes: - CVE Program Container:
MagentaCLOUD through 5.7.0.0 and 1&1 Online Storage through 6.1.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://zer0-day.pw/articles/2019-04/HiDrive-LPE-via-Insecure-WCF-endpoint
CVE ID: CVE-2019-9488 State: PUBLISHED Published: 2019-09-11T18:00:08 Last Updated: 2024-08-04T21:54:44.150Z Vendors: Trend Micro Products: Trend Micro Deep Security, Trend Micro Vulnerability Protection Problem Types: XXE Attack Description: Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM). Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1122900
CVE ID: CVE-2019-9489 State: PUBLISHED Published: 2019-04-05T22:46:14 Last Updated: 2024-08-04T21:54:44.231Z Vendors: Trend Micro Products: Apex One, OfficeScan, Worry-Free Business Security Problem Types: Directory Traversal Description: A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an attacker to modify arbitrary files on the affected product's management console. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1122250 - https://success.trendmicro.com/jp/solution/1122253
CVE ID: CVE-2019-9490 State: PUBLISHED Published: 2019-04-05T22:46:11 Last Updated: 2024-08-04T21:54:44.101Z Vendors: Trend Micro Products: InterScan Web Security Virtual Appliance Problem Types: Admin Credential Disclosure Description: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose administrative credentials. An attacker must be an authenticated user in order to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1122326 - http://www.securityfocus.com/bid/107848
CVE ID: CVE-2019-9491 State: PUBLISHED Published: 2019-10-21T18:35:49 Last Updated: 2024-08-04T21:54:44.137Z Vendors: Trend Micro Products: Trend Micro Anti-Threat Toolkit (ATTK) Problem Types: Arbitrary RCE Description: Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000149878 - http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txt - https:
http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txt - https://seclists.org/bugtraq/2019/Oct/30 - http://seclists.org/fulldisclosure/2019/Oct/42 - https://seclists.org/bugtraq/2020/Jan/55 - http://packetstormsecurity.com/files/156160/TrendMicro-Anti-Threat-Toolkit-Improper-Fix.html - http://seclists.org/fulldisclosure/2020/Jan/50
CVE ID: CVE-2019-9492 State: PUBLISHED Published: 2019-07-26T13:42:05 Last Updated: 2024-08-04T21:54:44.041Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: DLL Side-loading Description: A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protection. The attacker must have already gained authentication and have local access to the vulnerable system. Additional Analyst Notes: - CVE Program Container: References: - https://www.nsslabs.com/blog-posts/2019/7/24/your-advanced-endpoint-protection-aep-product-protects-your-computer-but-can
ttps://www.nsslabs.com/blog-posts/2019/7/24/your-advanced-endpoint-protection-aep-product-protects-your-computer-but-can-it-protect-itself - https://success.trendmicro.com/solution/1123045
CVE ID: CVE-2019-9493 State: PUBLISHED Published: 2020-01-15T17:05:27.083931Z Last Updated: 2024-09-17T03:27:50.908Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: AutoMobility Distribution Inc. Products: MyCar Controls Problem Types: CWE-798 Description: The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data from a target MyCar unit. This may allow the attacker to learn the location of a target, or gain unauthorized physical access to a vehicle. This issue affects AutoMobility MyCar versions prior to 3.4.24 on iOS and
ain unauthorized physical access to a vehicle. This issue affects AutoMobility MyCar versions prior to 3.4.24 on iOS and versions prior to 4.1.2 on Android. This issue has additionally been fixed in Carlink, Link, Visions MyCar, and MyCar Kia. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/174715/ - https://www.securityfocus.com/bid/107827 - https://play.google.com/store/apps/details?id=app.com.automobility.mycar.control - https://mycarcontrols.com/ - https://itunes.apple.com/us/app/mycar-controls/id1126511815
CVE ID: CVE-2019-9494 State: PUBLISHED Published: 2019-04-17T13:31:08 Last Updated: 2024-08-04T21:54:44.172Z Vendors: Wi-Fi Alliance Products: hostapd with SAE support, wpa_supplicant with SAE support Problem Types: CWE-208, CWE-524 Description: The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected. Additional Analyst Notes: - CVE Program Containe
icant with SAE support prior to and including version 2.7 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://w1.fi/security/2019-1/ - https://www.synology.com/security/advisory/Synology_SA_19_16 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc - h
ect.org/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc - https://seclists.org/bugtraq/2019/May/40 - http://packetstormsecurity.com/files/152914/FreeBSD-Security-Advisory-FreeBSD-SA-19-03.wpa.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html
CVE ID: CVE-2019-9495 State: PUBLISHED Published: 2019-04-17T13:31:08 Last Updated: 2024-08-04T21:54:44.180Z Vendors: Wi-Fi Alliance Products: hostapd with EAP-pwd support, wpa_supplicant with EAP-pwd support Problem Types: CWE-524 Description: The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerab
ble in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://w1.fi/security/2019-2/ - https://www.synology.com/security/advisory/Synology_SA_19_16 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5J
DBLAE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc - https://seclists.org/bugtraq/2019/May/40 - http://packetstormsecurity.com/files/152914/FreeBSD-Security-Advisory-FreeBSD-SA-19-03.wpa.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html
CVE ID: CVE-2019-9496 State: PUBLISHED Published: 2019-04-17T13:31:08 Last Updated: 2024-08-04T21:54:44.155Z Vendors: Wi-Fi Alliance Products: hostapd with SAE support, wpa_supplicant with SAE support Problem Types: CWE-642 Description: An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode. All version of hostapd with SAE support are vulnerable. An attacker may force the hostapd process to terminate, performing a denial of service attack. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected. Additional
ostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://w1.fi/security/2019-3/ - https://www.synology.com/security/advisory/Synology_SA_19_16 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/ - https://security.FreeBSD.org/ad