BSD

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: a2ps — insecure temporary file creation Related CVEs: CVE-2004-1170 CVE-2004-1377 Upstream summary: A Secunia Security Advisory reports that Javier Fernández-Sanguino Peña has found temporary file creation vulnerabilities in the fixps […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: samba — potential leakage of arbitrary memory contents Related CVEs: CVE-2008-4314 Upstream summary: Samba Team reports: Samba 3.0.29 and beyond contain a change to deal with gcc 4 optimizations. Part […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xine — multiple remote string vulnerabilities Related CVEs: CVE-2006-1905 Upstream summary: c0ntexb reports: There are 2 format string bugs in the latest version of Xine that could be exploited by […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-paperclip — validation bypass vulnerability Related CVEs: CVE-2015-2963 Upstream summary: Jon Yurek reports: Thanks to MORI Shingo of DeNA Co., Ltd. for reporting this. There is an issue where if […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-unicorn — sandbox escape and arbitrary code execution vulnerability Related CVEs: CVE-2021-44078 Upstream summary: jwang-a reports: An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: consul — rpc: authorize raft requests Related CVEs: CVE-2017-15133 CVE-2020-25864 CVE-2020-28053 CVE-2021-28156 CVE-2021-37219 Upstream summary: Hashicorp reports: HashiCorp Consul Raft RPC layer allows non-server agents with a valid certificate signed […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2014-8111 Upstream summary: NIST reports: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: groff — pic2graph and eqn2graph are vulnerable to symlink attack through temporary files Related CVEs: CVE-2004-0969 CVE-2004-1296 Upstream summary: The eqn2graph and pic2graph scripts in groff 1.18.1 allow local users […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mysql-scripts — mysqlaccess insecure temporary file creation Related CVEs: CVE-2004-0457 CVE-2005-0004 Upstream summary: The Debian Security Team reports: Javier Fernández-Sanguino Peña from the Debian Security Audit Project discovered a temporary […]