BSD

🟡 Medium   ⏱ 10–30 min  Last verified: 14 June 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-ansible — multiple vulnerabilities Related CVEs: CVE-2020-10744 CVE-2020-25635 CVE-2020-25636 CVE-2021-3532 CVE-2021-3583 CVE-2021-3620 Upstream summary: abeluck reports: A flaw was found in Ansible Base when using the aws_ssm connection plugin as […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mupdf — multiple vulnerabilities Related CVEs: CVE-2016-6265 CVE-2016-6525 Upstream summary: Tobias Kortkamp reports: Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libjpeg-turbo — Issue in the PPM reader causing a buffer overrun in cjpeg, TJBench, or the tjLoadImage() function. Related CVEs: CVE-2012-2806 CVE-2020-13790 Upstream summary: libjpeg-turbo releases reports: This release fixes […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xrdb — root hole via rogue hostname Related CVEs: CVE-2011-0465 Upstream summary: Matthias Hopf reports: By crafting hostnames with shell escape characters, arbitrary commands can be executed in a root […]

🟠 High   ⏱ 15–60 min  Last verified: 14 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mailman — content spoofing with invalid list names in web UI Related CVEs: CVE-2004-0412 CVE-2004-1143 CVE-2005-0202 CVE-2006-1712 CVE-2006-2191 CVE-2006-2941 CVE-2006-3636 CVE-2006-4624  +5 more Upstream summary: Mark Sapiro reports: A URL […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 June 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]

🟠 High   ⏱ 15–60 min  Last verified: 14 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt — mutt_decode_uuencoded() can read past the of the input line Related CVEs: CVE-2004-0078 CVE-2007-2683 CVE-2014-0467 CVE-2014-9116 CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352  +12 more Upstream summary: Tavis Ormandy reports: mutt_decode_uuencoded(), the […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pgbouncer — failed auth_query lookup leads to connection as auth_user Related CVEs: CVE-2015-4054 CVE-2015-6817 Upstream summary: PgBouncer reports: New auth_user functionality introduced in 1.6 allows login as auth_user when client […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-impacket — multiple path traversal vulnerabilities Related CVEs: CVE-2021-31800 Upstream summary: asolino reports: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a […]