BSD

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nbd-server — buffer overflow vulnerability Related CVEs: CVE-2005-3534 Upstream summary: Kurt Fitzner reports a buffer overflow vulnerability within nbd. This could potentially allow the execution of arbitrary code on the […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: phpLDAPadmin — Remote PHP code injection vulnerability Related CVEs: CVE-2006-2016 Upstream summary: EgiX (n0b0d13s at gmail dot com) reports: The $sortby parameter passed to 'masort' function in file lib/functions.php isn't […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: a2ps — insecure temporary file creation Related CVEs: CVE-2004-1170 CVE-2004-1377 Upstream summary: A Secunia Security Advisory reports that Javier Fernández-Sanguino Peña has found temporary file creation vulnerabilities in the fixps […]

🟠 High   ⏱ 15–60 min  Last verified: 23 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2015-3152 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836  +12 more Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with […]

🟠 High   ⏱ 15–60 min  Last verified: 23 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OTRS — Multiple vulnerabilities Related CVEs: CVE-2010-0438 CVE-2010-2080 CVE-2010-4071 CVE-2011-1518 CVE-2011-2746 CVE-2012-2582 CVE-2012-4600 CVE-2012-4751  +12 more Upstream summary: OTRS reports: An attacker who is logged into OTRS as an agent […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rails-html-sanitizer — possible XSS vulnerability Related CVEs: CVE-2015-7576 CVE-2015-7577 CVE-2015-7581 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753 CVE-2018-3741 Upstream summary: OSS-Security list: There is a possible XSS vulnerability in rails-html-sanitizer. The gem allows non-whitelisted […]

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — remote denial of service in JPEG2000 decoder Related CVEs: CVE-2014-4610 CVE-2015-3395 CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822  +12 more Upstream summary: FFmpeg security reports: FFmpeg 2.8.6 fixes the […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: radicale — multiple vulnerabilities Related CVEs: CVE-2015-8747 CVE-2015-8748 Upstream summary: Radicale reports: The multifilesystem backend allows access to arbitrary files on all platforms. Prevent regex injection in rights management. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libxine — multiple vulnerabilities Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2004-1300 CVE-2004-1379 CVE-2005-1195 CVE-2005-2967 CVE-2006-1664  +12 more Upstream summary: xine developers report: Fix another possible int overflow in the 4XM demuxer. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kde-runtime — kdesu: displayed command truncated by unicode string terminator Related CVEs: CVE-2013-7252 CVE-2014-8600 CVE-2016-7787 Upstream summary: Albert Aastals Cid reports: A maliciously crafted command line for kdesu can result […]