🟢 Low ⏱ 5–15 min Last verified: 13 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — Vim Shell Command Injection Vulnerabilities Related CVEs: CVE-2007-2953 CVE-2008-2712 Upstream summary: Rdancer.org reports: Improper quoting in some parts of Vim written in the Vim Script can lead to […]
🟢 Low ⏱ 5–15 min Last verified: 13 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: golddig — local buffer overflow vulnerabilities Related CVEs: CVE-2005-0121 Upstream summary: Two buffer overflow vulnerabilities where detected. Both issues can be used by local users to gain group games privileges […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeBSD — Predictable query ids in named(8) Related CVEs: CVE-2007-0493 CVE-2007-0494 CVE-2007-2926 Upstream summary: Problem Description: When named(8) is operating as a recursive DNS server or sending NOTIFY requests to […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: helvis — arbitrary file deletion problem Related CVEs: CVE-2005-0118 CVE-2005-0119 CVE-2005-0120 Upstream summary: The setuid root elvprsv utility, used to preserve recovery helvis files, can be abused by local users […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Mail-SpamAssassin — local user symlink-attack DoS vulnerability Related CVEs: CVE-2004-0796 CVE-2005-1266 CVE-2007-2873 Upstream summary: SpamAssassin website reports: A local user symlink-attack DoS vulnerability in SpamAssassin has been found, affecting versions […]
🟢 Low ⏱ 5–15 min Last verified: 12 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 12 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟡 Medium ⏱ 10–30 min Last verified: 12 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: patch — multiple vulnerabilities Related CVEs: CVE-2018-1000156 CVE-2018-6951 CVE-2018-6952 Upstream summary: NVD reports: An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a […]
🟢 Low ⏱ 5–15 min Last verified: 11 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: KDE Frameworks — malicious .desktop files execute code Related CVEs: CVE-2019-14744 Upstream summary: The KDE Community has released a security announcement: The syntax Key[$e]=$(shell command) in *.desktop files.directory files, and […]
🟢 Low ⏱ 5–15 min Last verified: 11 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-djblets — Self-XSS vulnerability Upstream summary: Djblets Release Notes reports: A recently-discovered vulnerability in the datagrid templates allows an attacker to generate a URL to any datagrid page containing malicious […]
