🟢 Low ⏱ 5–15 min Last verified: 12 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: newsgrab — insecure file and directory creation Related CVEs: CVE-2005-0153 CVE-2005-0154 Upstream summary: The newsgrab script uses insecure permissions during the creation of the local output directory and downloaded files. […]
🟢 Low ⏱ 5–15 min Last verified: 12 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: plib — stack-based buffer overflow Related CVEs: CVE-2011-4620 CVE-2012-4552 Upstream summary: CVE reports: Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute […]
🟠 High ⏱ 15–60 min Last verified: 12 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2016-9843 CVE-2017-10155 CVE-2017-10165 CVE-2017-10167 CVE-2017-10203 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: imlib2 — denial of service vulnerabilities Related CVEs: CVE-2004-0802 CVE-2004-0817 CVE-2004-1025 CVE-2004-1026 CVE-2006-4806 CVE-2006-4807 CVE-2006-4808 CVE-2006-4809 +4 more Upstream summary: Enlightenment reports: GIF loader: Fix segv on images without colormap […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483 +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pam_ldap — authentication bypass vulnerability Related CVEs: CVE-2005-2641 Upstream summary: Luke Howard reports: If a pam_ldap client authenticates against an LDAP server that returns a passwordPolicyResponse control, but omits the […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pyblosxom — atom flavor multiple XML injection vulnerabilities Upstream summary: Security Focus reports: PyBlosxom is prone to multiple XML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nokogiri — Security vulnerability Related CVEs: CVE-2019-5477 CVE-2020-26247 Upstream summary: Nokogiri reports: In Nokogiri versions <= 1.11.0.rc3, XML Schemas parsed by Nokogiri::XML::Schema were trusted by default, allowing external resources to […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rar — password prompt buffer overflow vulnerability Related CVEs: CVE-2007-0855 Upstream summary: iDefense reports: Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pyrad — multiple vulnerabilities Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which […]
