BSD

🟢 Low   ⏱ 5–15 min  Last verified: 2 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: drupal-pubcookie — authentication may be bypassed Related CVEs: CVE-2006-4717 Upstream summary: The Drupal Project reports: It is possible for a malicious user to spoof a user's identity by bypassing the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gftp — multiple vulnerabilities Related CVEs: CVE-2005-0372 CVE-2007-3961 CVE-2007-3962 Upstream summary: Gentoo reports: Kalle Olavi Niemitalo discovered two boundary errors in fsplib code included in gFTP when processing overly long […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: neon — NULL pointer dereference in Digest domain support Related CVEs: CVE-2004-0179 CVE-2004-0398 CVE-2008-3746 Upstream summary: Joe Orton reports: A NULL pointer deference in the Digest authentication support in neon […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pivotx — Multiple unrestricted file upload vulnerabilities Related CVEs: CVE-2011-1035 CVE-2012-2274 CVE-2014-0341 Upstream summary: Pivotx reports: Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: SDL2_image — multiple vulnerabilities Related CVEs: CVE-2019-5051 CVE-2019-5052 CVE-2019-5057 CVE-2019-5058 CVE-2019-5059 CVE-2019-5060 Upstream summary: SDL_image developers report: Fixed a number of security issues: TALOS-2019-0820 TALOS-2019-0821 TALOS-2019-0841 TALOS-2019-0842 TALOS-2019-0843 TALOS-2019-0844 Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ncurses — multiple issues Related CVEs: CVE-2017-13728 CVE-2017-13729 CVE-2017-13730 CVE-2017-13731 CVE-2017-13732 CVE-2017-13733 CVE-2017-13734 Upstream summary: ncurses developers reports: There are multiple illegal address access issues and an infinite loop issue. […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vim — vulnerabilities in modeline handling: glob, expand Related CVEs: CVE-2004-1138 CVE-2005-2368 Upstream summary: Georgi Guninski discovered a way to construct Vim modelines that execute arbitrary shell commands. The vulnerability […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kaffeine — buffer overflow vulnerability Related CVEs: CVE-2006-0051 Upstream summary: The KDE team reports: Kaffeine can produce a buffer overflow in http_peek() while creating HTTP request headers for fetching remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: darkhttpd — DOS vulnerability Related CVEs: CVE-2020-25691 Upstream summary: Mitre reports: flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of-service by accessing a file with […]