BSD

🟢 Low   ⏱ 5–15 min  Last verified: 28 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: portupgrade — insecure temporary file handling vulnerability Related CVEs: CVE-2005-0610 Upstream summary: Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-suds — vulnerable to symlink attacks Related CVEs: CVE-2013-2217 Upstream summary: SUSE reports: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Pillow — Multiple vulnerabilities Related CVEs: CVE-2019-16865 CVE-2019-19911 CVE-2020-5310 CVE-2020-5311 CVE-2020-5312 CVE-2020-5313 Upstream summary: Pillow developers report: This release addresses several security problems, as well as addressing CVE-2019-19911. CVE-2019-19911 is […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: quassel — multiple vulnerabilities Upstream summary: Gentoo reports: quasselcore: corruption of heap metadata caused by qdatastream leading to preauth remote code execution. Severity: high, by default the server port is […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zgv, xzgv — heap overflow vulnerability Related CVEs: CVE-2004-0994 CVE-2006-1060 Upstream summary: Gentoo reports: Andrea Barisani of Gentoo Linux discovered xzgv and zgv allocate insufficient memory when rendering images with […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: devel/ipython — multiple vulnerabilities Related CVEs: CVE-2015-4706 CVE-2015-4707 CVE-2015-5607 CVE-2015-6938 CVE-2015-7337 Upstream summary: Matthias Bussonnier reports: Summary: Local folder name was used in HTML templates without escaping, allowing XSS in […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Nextcloud — Password share by mail not hashed Related CVEs: CVE-2020-8183 Upstream summary: The Nextcloud project reports: NC-SA-2020-026 (low): Password of share by mail is not hashed when given on […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: shibboleth-sp — vulnerable to forged user attribute data Related CVEs: CVE-2016-0729 CVE-2016-2099 CVE-2016-4463 CVE-2018-0486 CVE-2018-0489 Upstream summary: Shibboleth consortium reports: Shibboleth SP software vulnerable to additional data forgery flaws The […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — ZipArchive segfault with FL_UNCHANGED on empty archive Related CVEs: CVE-2010-3709 CVE-2011-0421 Upstream summary: US-CERT/NIST reports: The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 […]

🟠 High   ⏱ 15–60 min  Last verified: 26 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dbus file descriptor leak Related CVEs: CVE-2006-6107 CVE-2013-2168 CVE-2014-3477 CVE-2014-3532 CVE-2014-3533 CVE-2014-3635 CVE-2014-3636 CVE-2014-3637  +4 more Upstream summary: GitHub Security Lab reports: D-Bus has a file descriptor leak, which can […]