🟢 Low ⏱ 5–15 min Last verified: 14 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tcl/tk — buffer overflow in ReadImage function Related CVEs: CVE-2007-5137 Upstream summary: A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpicalendar — cross site scripting vulnerability Related CVEs: CVE-2005-3366 Upstream summary: Francesco Ongaro reports that phpicalendar is vulnerable for a cross site scripting attack. The vulnerability is caused by improper […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sup — format string vulnerability Related CVEs: CVE-2004-0451 Upstream summary: Debian Security Advisory reports: [email protected] discovered a format string vulnerability in sup, a set of programs to synchronize collections of […]
🟡 Medium ⏱ 10–30 min Last verified: 13 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: palemoon — multiple vulnerabilities Related CVEs: CVE-2017-7832 CVE-2017-7835 CVE-2017-7840 CVE-2018-5102 CVE-2018-5122 Upstream summary: Pale Moon reports: CVE-2018-5102: Use-after-free in HTML media elements CVE-2018-5122: Potential integer overflow in DoCrypt Table of […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: readstat — Heap buffer overflow in readstat_convert Upstream summary: Google reports: A heap buffer overflow exists in readstat_convert. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: asterisk — remote heap overwrite vulnerability Upstream summary: Adam Boileau of Security-Assessment.com reports: The Asterisk Skinny channel driver for Cisco SCCP phones (chan_skinny.so) incorrectly validates a length value in the […]
🟠 High ⏱ 15–60 min Last verified: 12 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kauth: Local privilege escalation Related CVEs: CVE-2004-0411 CVE-2004-0689 CVE-2004-0690 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0746 CVE-2004-1156 +12 more Upstream summary: Albert Astals Cid reports: KAuth contains a logic flaw in which the […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: avahi — denial of service Related CVEs: CVE-2010-2244 CVE-2011-1002 Upstream summary: Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 11 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde — XSS vulnerabilities Related CVEs: CVE-2005-0961 CVE-2005-3759 CVE-2006-1491 CVE-2006-2195 CVE-2006-3548 CVE-2015-8807 CVE-2016-2228 Upstream summary: The Horde Team reports: Fixed XSS vulnerabilities in menu bar and form renderer. Table of […]
