BSD

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: eyeOS — multiple XSS security bugs Related CVEs: CVE-2006-5071 Upstream summary: eyeOS team reports: [EyeOS 0.9.1] release fixes two XSS security bugs, so we recommend all users to upgrade to […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ircII — denial of service Related CVEs: CVE-2021-29376 Upstream summary: Michael Ortmann reports: ircii has a bug in parsing CTCP UTC messages. Its unknown if this could also be used […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gld — format string and buffer overflow vulnerabilities Related CVEs: CVE-2005-1099 CVE-2005-1100 Upstream summary: Gld has been found vulnerable to multiple buffer overflows as well as multiple format string vulnerabilities. […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]

🟠 High   ⏱ 15–60 min  Last verified: 31 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: flash — multiple vulnerabilities Related CVEs: CVE-2016-4273 CVE-2016-4286 CVE-2016-6981 CVE-2016-6982 CVE-2016-6983 CVE-2016-6984 CVE-2016-6985 CVE-2016-6986  +12 more Upstream summary: Adobe reports: These updates resolve type confusion vulnerabilities that could lead to […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 August 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kvirc — multiple vulnerabilities Related CVEs: CVE-2010-2451 CVE-2010-2452 Upstream summary: Two security vulnerabilities have been discovered: Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have […]