BSD

🟠 High   ⏱ 15–60 min  Last verified: 22 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Related CVEs: CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 CVE-2013-2203  +12 more Upstream summary: wordpress developers reports: This security and maintenance release features 1 bug fix […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache — Insecure LD_LIBRARY_PATH handling Related CVEs: CVE-2011-3192 CVE-2012-0883 Upstream summary: Apache reports: Insecure handling of LD_LIBRARY_PATH was found that could lead to the current working directory to be searched […]

🟠 High   ⏱ 15–60 min  Last verified: 21 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: postnuke — admin section SQL injection Related CVEs: CVE-2005-0615 CVE-2005-0616 CVE-2005-0617 CVE-2005-1621 CVE-2005-1695 CVE-2005-1696 CVE-2005-1698 CVE-2005-1777  +3 more Upstream summary: ISS X-Force reports: PostNuke is vulnerable to SQL injection. A […]

🟠 High   ⏱ 15–60 min  Last verified: 21 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Roundcube — Multiple vulnerabilities Related CVEs: CVE-2008-5619 CVE-2009-0413 CVE-2011-2937 CVE-2012-3508 CVE-2013-1904 CVE-2015-5381 CVE-2015-5383 CVE-2016-5103  +8 more Upstream summary: The Roundcube project reports: Cross-Site-Scripting vulnerability via SVG’s animate tag Information Disclosure […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-doorkeeper — token revocation vulnerability Related CVEs: CVE-2018-1000211 Upstream summary: NVD reports: Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Related CVEs: CVE-2004-1378 Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: evince and atril — command injection vulnerability in CBT handler Related CVEs: CVE-2017-1000083 Upstream summary: GNOME reports: The comic book backend in evince 3.24.0 (and earlier) is vulnerable to a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: twiki — remote Perl code execution Related CVEs: CVE-2004-1037 CVE-2006-3336 CVE-2008-3195 CVE-2008-5304 CVE-2008-5305 CVE-2014-7236 Upstream summary: TWiki developers report: The debugenableplugins request parameter allows arbitrary Perl code execution. Using an […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Postfix — memory corruption vulnerability Related CVEs: CVE-2011-0411 CVE-2011-1720 Upstream summary: The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-foolscap — local file inclusion Upstream summary: Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who […]