BSD

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: drupal9 — multiple vulnerabilities Related CVEs: CVE-2005-1921 CVE-2005-2106 CVE-2005-2498 CVE-2006-2742 CVE-2006-2743 CVE-2006-2833 CVE-2007-0136 CVE-2007-5593  +12 more Upstream summary: Drupal reports: CVE-2022-31175: Cross-site scripting (XSS) caused by the editor instance destroying […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PHP — Multiple vulnerabilities in EXIF module Related CVEs: CVE-2019-11034 CVE-2019-11035 Upstream summary: The PHP project reports: Heap-buffer-overflow in php_ifd_get32s (CVE-2019-11034) Heap-buffer-overflow in exif_iif_add_value (CVE-2019-11035) Table of contents Symptom & […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nested filters leads to stack overflow Related CVEs: CVE-2020-12243 Upstream summary: Howard Chu reports: nested filters leads to stack overflow Table of contents Symptom & Impact Environment & Reproduction Root […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: evince and atril — command injection vulnerability in CBT handler Related CVEs: CVE-2017-1000083 Upstream summary: GNOME reports: The comic book backend in evince 3.24.0 (and earlier) is vulnerable to a […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Several issues in Lynis Upstream summary: lynis update: This release resolves two security issues CVE-2020-13882 – Discovered by Sander Bos, code submission by Katarina Durechova CVE-2019-13033 – Discovered by Sander […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-Scrapy — DoS vulnerability Related CVEs: CVE-2017-14158 CVE-2022-0577 Upstream summary: kmike and nramirezuy report: Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cyrus-sasl — Fix off by one error Related CVEs: CVE-2004-0884 CVE-2006-1721 CVE-2009-0688 CVE-2019-19906 Upstream summary: Cyrus SASL 2.1.x Release Notes New in 2.1.28 reports: Fix off by one error Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qt4-imageformats, qt4-gui, qt5-gui — Multiple Vulnerabilities in Qt Image Format Handling Related CVEs: CVE-2014-0190 CVE-2015-0295 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 Upstream summary: Richard J. Moore reports: Due to two recent vulnerabilities identified […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/cfs — buffer overflow Related CVEs: CVE-2002-0351 Upstream summary: Debian reports: Zorgon found several buffer overflows in cfsd, a daemon that pushes encryption services into the Unix(tm) file system. We […]