BSD

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gnomevfs — unsafe URI handling Related CVEs: CVE-2004-0494 Upstream summary: Alexander Larsson reports that some versions of gnome-vfs and MidnightCommander contain a number of `extfs' scripts that do not properly […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: uwsgi — a stack-based buffer overflow Related CVEs: CVE-2018-6758 Upstream summary: Uwsgi developers report: It was discovered that the uwsgi_expand_path function in utils.c in Unbit uWSGI, an application container server, […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xinetd — ignores user and group directives for TCPMUX services Related CVEs: CVE-2012-0862 CVE-2013-4342 Upstream summary: xinetd would execute configured TCPMUX services without dropping privilege to match the service configuration […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2007-0774 CVE-2007-1860 Upstream summary: Kazu Nambo reports: URL decoding the Apache webserver prior to decoding in the Tomcat server could pypass access control rules […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt-devel — failure to check SMTP TLS server certificate Related CVEs: CVE-2011-1429 Upstream summary: Dave B reports on Full Disclosure: It seems that mutt fails to check the validity of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zenphoto — multiple vulnerabilities Related CVEs: CVE-2007-6666 CVE-2015-5591 CVE-2015-5592 CVE-2015-5593 CVE-2015-5594 CVE-2015-5595 Upstream summary: zenphoto reports: Fixes several SQL Injection, XSS and path traversal security issues Table of contents Symptom […]

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772  +1 more Upstream summary: The PHP Group reports: Please reference CVE/URL list for details Table of […]