🟢 Low ⏱ 5–15 min Last verified: 23 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟡 Medium ⏱ 10–30 min Last verified: 23 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: graphite2 — code execution vulnerability Related CVEs: CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526 Upstream summary: Talos reports: An exploitable denial of service vulnerability exists in the font handling of Libgraphite. A specially […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xmms — Integer Overflow And Underflow Vulnerabilities Related CVEs: CVE-2007-0653 CVE-2007-0654 Upstream summary: Secunia reports: Secunia Research has discovered two vulnerabilities in XMMS, which can be exploited by malicious people […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Libgit2 — Fixing insufficient validation of submodule names Related CVEs: CVE-2018-11235 Upstream summary: The Git community reports: Insufficient validation of submodule names Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 22 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2016-3492 CVE-2016-5616 CVE-2016-5617 CVE-2016-5624 CVE-2016-5626 CVE-2016-5629 CVE-2016-6663 CVE-2016-6664 +4 more Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with […]
🟡 Medium ⏱ 10–30 min Last verified: 22 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: webmin — unauthenticated remote code execution Related CVEs: CVE-2005-3912 CVE-2005-3962 CVE-2019-15107 Upstream summary: Joe Cooper reports: I've rolled out Webmin version 1.930 and Usermin version 1.780 for all repositories. This […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: shadowsocks-libev — command injection via shell metacharacters Upstream summary: MITRE reports: Improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic. Table […]
🟠 High ⏱ 15–60 min Last verified: 21 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mplayer — vulnerability in STR files processor Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2005-1195 CVE-2006-0579 CVE-2006-1502 CVE-2006-6172 CVE-2007-1246 +8 more Upstream summary: Secunia reports: The vulnerability is caused due to a […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mybb — multible vulnerabilities Upstream summary: mybb Team reports: High risk: Installer RCE on settings file write Medium risk: Arbitrary upload paths and Local File Inclusion RCE Medium risk: XSS […]
