BSD

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenX — SQL injection vulnerability Related CVEs: CVE-2013-7149 Upstream summary: Revive reports: An SQL-injection vulnerability was recently discovered and reported to the Revive Adserver team by Florian Sander. The vulnerability […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: graylog — remote code execution in log4j from user-controlled log input Related CVEs: CVE-2021-44228 CVE-2021-45046 Upstream summary: Apache Software Foundation reports: It was found that the fix to address CVE-2021-44228 […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Mozilla — Stored passwords in 'Saved Logins' can be copied without master password entry Related CVEs: CVE-2019-11733 Upstream summary: Mozilla Foundation reports: CVE-2019-11733: Stored passwords in 'Saved Logins' can be […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 Upstream summary: The PHP project reports: Core: Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive method calls). Fixed bug #70121 […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-DBI — insecure temporary file creation vulnerability Related CVEs: CAN-2005-0077 Upstream summary: Javier Fernández-Sanguino Peña reports: The DBI library, the Perl5 database interface, creates a temporary PID file in an […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: taglib — heap-based buffer over-read via a crafted audio file Related CVEs: CVE-2018-11439 Upstream summary: Webin security lab – dbapp security Ltd reports: The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bsh — remote code execution vulnerability Related CVEs: CVE-2016-2510 Upstream summary: Stian Soiland-Reyes reports: This release fixes a remote code execution vulnerability that was identified in BeanShell by Alvaro Muñoz […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jdk — jar directory traversal vulnerability Related CVEs: CVE-2004-1029 CVE-2005-1080 Upstream summary: Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-nicotine-plus — Denial of service vulnerability Related CVEs: CVE-2021-45848 Upstream summary: ztauras reports: Denial of service (DoS) vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pygments — shell injection vulnerability Related CVEs: CVE-2015-8557 Upstream summary: NVD reports: The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via […]