BSD

🟢 Low   ⏱ 5–15 min  Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_perl2 — execute arbitrary Perl code Upstream summary: mod_perl2 2.0.11 fixes Arbitrary Perl code execution in the context of the user account via a user-owned .htaccess. mod_perl 2.0 through 2.0.10 […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: graphviz — format string vulnerability Upstream summary: Joshua Rogers reports: A format string vulnerability has been found in `graphviz'. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jabberd — authentication bypass vulnerability Related CVEs: CVE-2006-1329 CVE-2012-3525 CVE-2017-10807 Upstream summary: SecurityFocus reports: JabberD is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the […]

🟠 High   ⏱ 15–60 min  Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libgadu — multiple vulnerabilities Related CVEs: CVE-2004-0005 CVE-2004-0006 CVE-2004-0007 CVE-2004-0008 CVE-2004-0500 CVE-2004-0754 CVE-2004-0784 CVE-2004-0785  +12 more Upstream summary: Wojtek Kaniewski reports: Multiple vulnerabilities have been found in libgadu, a library […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p7zip-codec-rar — insufficient error handling Related CVEs: CVE-2018-5996 Upstream summary: MITRE reports: Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: shoutcast — cross-site scripting, information exposure Related CVEs: CVE-2006-3007 Upstream summary: Goober's advisory reports reports that shoutcast is vulnerable to an arbitrary file reading vulnerability: Impact of the vulnerability depends […]

🟠 High   ⏱ 15–60 min  Last verified: 25 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822 CVE-2015-6823 CVE-2015-6824  +11 more Upstream summary: NVD reports: The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Template::Toolkit — Directory traversal on write Related CVEs: CVE-2019-19781 Upstream summary: Art Manion and Will Dormann report: By using an older and less-secure form of open(), it is possible for […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: enscript — arbitrary code execution vulnerability Related CVEs: CVE-2004-1184 CVE-2004-1185 CVE-2004-1186 CVE-2008-3863 CVE-2008-4306 Upstream summary: Ulf Harnhammar of Secunia Research reports: Stack-based buffer overflow in the read_special_escape function in src/psgen.c […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: WebCalendar — Persistent XSS Related CVEs: CAN-2005-2320 CVE-2005-2717 CVE-2006-2762 CVE-2007-1343 CVE-2012-0846 Upstream summary: tom reports, There is no sanitation on the input of the location variable allowing for persistent XSS. […]